PT-2026-139425

The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.15.0.2 via the 'order-pay WP query var from /checkout/order-pay//' parameter due to missing validation on a user controlled key. This...