Threats tagged 'ghsa-5ppg-2735-mfmv'

The FunnelKit Automations plugin for WordPress and WooCommerce versions up to 3.6.4.1 has a Missing Authorization vulnerability in its bwfan_test_email AJAX handler. The plugin fails to properly verify user authorization for administrative actions, exposing a nonce publicly via frontend JavaScript. This allows authenticated users with Subscriber-level access or higher to send arbitrary emails with attacker-controlled content from the site.