Easiest Sales Funnel Builder For WordPress & WooCommerce by WPFunnels, 0aa20d31bd7bc666eb413a15b7cb604aec386407
- CVE, Research URL
- Home page URL
-
Security reports for Easiest Sales Funnel Builder For WordPress & WooCommerce by WPFunnels
- Published on
- Jul 10, 2023
- Research Description
- WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell [wpfunnels] < 2.7.16 WPFunnels <= 2.7.15 - Insecure Direct Object Reference The WPFunnels plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 2.7.15. This is due to insufficient validation on a user controlled key. This makes it possible for authenticated attackers to perform actions on objects they aren't intended to manipulate.
- Affected versions
-
max 2.7.16.
- Status
-
vulnerable