Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This vulnerability allows authenticated attackers with Contributor-level access and above to extract sensitive data, including authentication cookies of other site users, potentially leading to privilege escalation. Both FunnelKit – Funnel Builder for WooCommerce Checkout and FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce are affected.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-7654 |
Exploitation
To exploit this vulnerability, an authenticated attacker with Contributor-level access can use the wf_get_cookie shortcode to retrieve sensitive information, including authentication cookies of other users. This can lead to unauthorized access and privilege escalation within the affected WordPress sites.
Affected Products
- FunnelKit – Funnel Builder for WooCommerce Checkout: A plugin that allows users to create custom funnels for WooCommerce checkout processes.
- FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce: A plugin designed for email marketing automation and customer relationship management within WordPress and WooCommerce.
Mitigation
To mitigate this vulnerability, it is recommended to update the affected FunnelKit plugins to their latest versions as soon as they are available. Additionally, restricting access to the wf_get_cookie shortcode to only trusted users can help prevent exploitation.