FunnelKit Payment Gateway for Stripe WooCommerce vulnerabilities
1 known vulnerability in FunnelKit Payment Gateway for Stripe WooCommerce from Teamfunnelkit. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
FunnelKit Payment Gateway for Stripe WooCommerce: Authorization Bypass Through User-Controlled Key
The FunnelKit Payment Gateway for Stripe WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.15.0.2 via the 'order-pay (WP query var from /checkout/order-pay/<ID>/)' parameter due to missin