CVE-2025-1562: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the installoractivateaddonplugins() function and a weak nonce hash in all versions up to, and including, 3.5.3. This makes it possible for unauthenticated attackers to install arbitrary plugins on the site that can be leveraged to further infect a vulnerable site.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1562?
CVE-2025-1562 is considered a high severity vulnerability due to its potential for unauthorized arbitrary plugin installation.
How do I fix CVE-2025-1562?
To fix CVE-2025-1562, update the FunnelKit plugin to version 3.5.4 or later which includes the necessary capability checks.
What type of attack can be executed using CVE-2025-1562?
CVE-2025-1562 allows attackers to install or activate arbitrary plugins without proper authorization, potentially leading to a complete site compromise.
Which plugin is affected by CVE-2025-1562?
CVE-2025-1562 affects the FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation plugin.
How can I determine if my version is vulnerable to CVE-2025-1562?
If you are using FunnelKit version 3.5.3 or earlier, your installation is vulnerable to CVE-2025-1562.