Lucene search

K
wpvulndbWpvulndbWPVDB-ID:34D43C26-D528-40C1-9765-9D11B69899E9
HistoryJan 03, 2024 - 12:00 a.m.

FunnelKit Checkout < 3.11.0 - Unauthenticated Arbitrary Content Deletion

2024-01-0300:00:00
wpscan.com
7
funnelkit
checkout
wordpress
vulnerability
unauthenticated
content deletion

AI Score

6.8

Confidence

High

EPSS

0

Percentile

9.0%

Description The FunnelKit Checkout plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on an unknown function in all versions up to, and including, 3.10.3. This makes it possible for unauthenticated attackers, to delete arbitrary content.

AI Score

6.8

Confidence

High

EPSS

0

Percentile

9.0%

Related for WPVDB-ID:34D43C26-D528-40C1-9765-9D11B69899E9