CVE-2025-10567

The FunnelKit WordPress plugin (versions prior to 3.12.0.1 ) is vulnerable to a reflected cross-site scripting (XSS) attack. The root cause is the failure to properly sanitize or validate user-provided data before echoing it back during certain checkout-related AJAX actions . This allows an attac...