WordPress FunnelKit Checkout Plugin <= 3.10.3 is vulnerable to Settings Change

🗓️ 27 Dec 2023 00:00:00Reported by Dave Jong (Patchstack)Type

WordPress FunnelKit Checkout Plugin <= 3.10.3 vulnerable to Settings Change, fixed in 3.11.

Reporter	Title	Published	Views	Family All 6
WPVulnDB	FunnelKit Checkout < 3.11.0 - Subscriber+ Settings Update	3 Jan 202400:00	–	wpvulndb
Vulnrichment	CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability	12 Jun 202408:49	–	vulnrichment
Cvelist	CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability	12 Jun 202408:49	–	cvelist
NVD	CVE-2023-51671	12 Jun 202409:15	–	nvd
CVE	CVE-2023-51671	12 Jun 202409:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)	5 Jan 202413:20	–	wordfence

Vulners

Node

funnelkit funnelkit_checkoutRange≤3.10.3wordpress

Source	Link
cve	www.cve.org/CVERecord

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Dec 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS35.4