Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:179B46AF-70BC-43AC-8676-FC7D1A554F81
HistoryJan 03, 2024 - 12:00 a.m.

FunnelKit Checkout < 3.11.0 - Subscriber+ Settings Update

2024-01-0300:00:00
wpscan.com
7
funnelkit
checkout
plugin
settings
update
vulnerability
authentication
authenticated users

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin does not have authorisation check when updating its settings, which could allow any authenticated users, such as subscriber to update them

CPENameOperatorVersion
eq3.11.0

Related

cvelist 1
nvd 1
cve 1
vulnrichment 1
wordfence 1
cvelist
cvelist
CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability
2024-06-12 08:49:38
nvd
nvd
CVE-2023-51671
2024-06-12 09:15:13
cve
cve
CVE-2023-51671
2024-06-12 09:15:13
vulnrichment
vulnrichment
CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability
2024-06-12 08:49:38
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (December 18, 2023 to December 31, 2023)
2024-01-05 13:20:47

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for WPVDB-ID:179B46AF-70BC-43AC-8676-FC7D1A554F81
cvelist1nvd1cve1vulnrichment1wordfence1