← WordPress Vulnerabilities
WordPress security by component

FunnelKit Payment Gateway for Stripe WooCommerce

FunnelKit Payment Gateway for Stripe WooCommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: funnelkit-stripe-woo-payment-gateway

CVE-2026-57635: FunnelKit Payment Gateway for Stripe WooCommerce: Cross-site request forgery

FunnelKit Payment Gateway for Stripe WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 1.14.0.3.

PublishedJun 26, 2026
Known safe version1.14.0.4
Safe version
Jun 26, 2026 CVE-2026-57635
FunnelKit Payment Gateway for Stripe WooCommerce: Cross-site request forgery
FunnelKit Payment Gateway for Stripe WooCommerce is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is n/a through 1.14.0.3.
1.14.0.4
CVE6.5
NVDPending