CVE-2025-64222: Fantasticplugins Woocommerce Recover Abandoned Cart

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in FantasticPlugins WooCommerce Recover Abandoned Cart rac allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Recover Abandoned Cart: from n/a through <= 24.6.0.

Affected products

• Fantasticplugins Woocommerce Recover Abandoned Cart: up to and including 24.6.0

Published 2025-12-18. Last modified 2026-06-17.