https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 17:41:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-287717 EUVD-2026-287717 https://cve.radiocsirt.org/vuln/euvd-2026-287717 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7654 <p>Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make privilege escalation possible. Please note both FunnelKit – Funnel Builder for WooCommerce Checkout AND FunnelKit Automations – Email Marketing Automation and CRM for WordPress &amp; WooCommerce are affected by this.</p> <p>Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make privilege escalation possible. Please note both FunnelKit – Funnel Builder for WooCommerce Checkout AND FunnelKit Automations – Email Marketing Automation and CRM for WordPress &amp; WooCommerce are affected by this.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7654 https://cve.radiocsirt.org/vuln/ghsa-gwxj-3w4v-fq34 <p>Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make privilege escalation possible.</p> <p>Please note both FunnelKit – Funnel Builder for WooCommerce Checkout AND FunnelKit Automations – Email Marketing Automation and CRM for WordPress &amp; WooCommerce are affected by this.</p> <p>Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies of other site users, which may make privilege escalation possible.</p> <p>Please note both FunnelKit – Funnel Builder for WooCommerce Checkout AND FunnelKit Automations – Email Marketing Automation and CRM for WordPress &amp; WooCommerce are affected by this.</p> https://cve.radiocsirt.org/vuln/ghsa-gwxj-3w4v-fq34