Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. Authenticated attackers with Contributor-level access and above can extract sensitive data, including authentication cookies of other site users, potentially leading to privilege escalation. Both FunnelKit – Funnel Builder for WooCommerce Checkout and FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce are affected.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-7654 |
Exploitation
To exploit this vulnerability, an authenticated attacker with Contributor-level access can use the wf_get_cookie shortcode to retrieve sensitive information, including authentication cookies of other users. This could allow the attacker to impersonate other users and escalate their privileges within the affected WordPress site.
Affected Products
- FunnelKit – Funnel Builder for WooCommerce Checkout: A plugin that allows users to create custom funnels for WooCommerce checkout processes.
- FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce: A plugin designed for email marketing automation and customer relationship management within WordPress and WooCommerce.
Mitigation
To mitigate this vulnerability, it is recommended that users update their FunnelKit plugins to the latest versions as soon as they are available. Additionally, restricting access to the wf_get_cookie shortcode to only trusted users can help prevent unauthorized data exposure.