Skip to content
OpenAdvisories

Vendor

flenskiproject

1 known vulnerabilities.

Products

FunKItools 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10301

    FunKItools <= 1.0.2 - Cross-Site Request Forgery to Settings Update

    The FunKItools plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the saveFields() function. This makes it possible for unauthenticated attacker…

    flenskiproject FunKItools Web / CMS