Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-57635 EUVD-2026-39751GHSA-744q-v2g8-3vv4

WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 26, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack

Vendor: FunnelKit Product: FunnelKit Payment Gateway for Stripe WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions.

Affected products

VendorProductAffectedFixed
FunnelKit FunnelKit Payment Gateway for Stripe WooCommerce ≤ 1.14.0.3 —

References