CVE-2023-51670: WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability
Published Jun 12, 2024
·Updated
Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.
Affected Software
1 affected component
FunnelKit Funnelkit Checkout Wordpress<3.11.0
Remediation
Information
Update to 3.11.0 or a higher version.
Event History
Jun 12, 2024
CVE Published
via MITRE·08:54 AM
Data Sourced
via MITRE·08:54 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-51670?
CVE-2023-51670 is classified as a high-severity vulnerability due to its missing authorization characteristics.
2
How do I fix CVE-2023-51670?
To resolve CVE-2023-51670, update FunnelKit Checkout to version 3.10.4 or later.
3
Which versions are affected by CVE-2023-51670?
CVE-2023-51670 affects FunnelKit Checkout versions from n/a up to 3.10.3.
4
What kind of vulnerability is CVE-2023-51670?
CVE-2023-51670 is a missing authorization vulnerability that could potentially allow unauthorized actions.
5
Is there a workaround for CVE-2023-51670?
As of now, there is no documented workaround for CVE-2023-51670 besides upgrading the plugin.