CVE-2025-1562: CWE-862 Missing Authorization in amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.
AI Analysis
Technical Summary
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress suffers from a missing authorization check in the install_or_activate_addon_plugins() function combined with a weak nonce hash. This allows unauthenticated attackers to bypass capability checks and install arbitrary plugins on the site. This vulnerability affects all versions up to and including 3.5.3 and is tracked as CVE-2025-1562 with a critical CVSS 3.1 score of 9.8. The vulnerability is categorized under CWE-862 (Missing Authorization). No patch or official fix has been documented yet.
Potential Impact
Successful exploitation allows unauthenticated attackers to install arbitrary plugins on the affected WordPress site, potentially leading to full site compromise including data theft, site defacement, or further malware deployment. The vulnerability impacts confidentiality, integrity, and availability severely as indicated by the CVSS score of 9.8.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should restrict plugin installation capabilities to trusted users only and consider disabling or limiting access to the vulnerable plugin. Monitoring for unusual plugin installations and applying WordPress security best practices may help reduce risk.
CVE-2025-1562: CWE-862 Missing Authorization in amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
Description
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.
CVSS v3.1
Score 9.8critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress suffers from a missing authorization check in the install_or_activate_addon_plugins() function combined with a weak nonce hash. This allows unauthenticated attackers to bypass capability checks and install arbitrary plugins on the site. This vulnerability affects all versions up to and including 3.5.3 and is tracked as CVE-2025-1562 with a critical CVSS 3.1 score of 9.8. The vulnerability is categorized under CWE-862 (Missing Authorization). No patch or official fix has been documented yet.
Potential Impact
Successful exploitation allows unauthenticated attackers to install arbitrary plugins on the affected WordPress site, potentially leading to full site compromise including data theft, site defacement, or further malware deployment. The vulnerability impacts confidentiality, integrity, and availability severely as indicated by the CVSS score of 9.8.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should restrict plugin installation capabilities to trusted users only and consider disabling or limiting access to the vulnerable plugin. Monitoring for unusual plugin installations and applying WordPress security best practices may help reduce risk.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Wordfence
- Date Reserved
- 2025-02-21T17:00:19.866Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 68526c07a8c92127438728d8
Added to database: 06/18/2025, 07:34:31 UTC
Last enriched: 04/09/2026, 21:23:41 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 227
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.