Threats tagged 'ghsa-w6ph-hrmj-vffx'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2025-12468The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is Medium5.3EPSS 0.4%2025-11-05GCVE DatabaseCVE-2025-12468 The FunnelKit Automations plugin for WordPress and WooCommerce versions up to 3.6.4.1 has a vulnerability that allows unauthenticated attackers to access sensitive information via the '/wc-coupons/' REST API endpoint. This endpoint is publicly accessible without authentication, exposing WooCommerce coupon codes, IDs, and expiration statuses. EPSS 0.4%Report on CVE-2025-12468 Vulnerability CWE-200 #ghsa-w6ph-hrmj-vffx	GCVE Database	2025-11-05

Page 1 of 1