Threats tagged 'ghsa-3h7v-9626-9c6v'

The FunnelKit Automations plugin for WordPress and WooCommerce is vulnerable to a time-based SQL Injection via the 'bwfan_cart_id' parameter in all versions up to and including 3.8.5.2. This vulnerability allows unauthenticated attackers to inject SQL queries during a guest checkout process, potentially extracting sensitive database information. The attack requires only a publicly obtainable WooCommerce cart nonce and is executed in two steps involving a scheduled Action Scheduler job.