← All advisories

Medium severity4.3NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026

CVE-2023-51670

CVE-2023-51670

Description

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

Affected products

4

Funnelkit/Funnelkit Checkout3 versions
cpe:2.3:a:funnelkit:funnelkit_checkout:*:*:*:*:*:wordpress:*:*+ 2 more
- cpe:2.3:a:funnelkit:funnelkit_checkout:*:*:*:*:*:wordpress:*:*range: <3.11.0
- (no CPE)range: <=3.10.3
- (no CPE)range: n/a
WordPress/FunnelKit Checkoutllm-fuzzy
Range: <=3.10.3

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/woofunnels-aero-checkout/wordpress-funnelkit-checkout-plugin-3-10-3-authenticated-arbitrary-plugin-activation-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.