CVE-2025-10567 – FunnelKit < 3.12.0.1 – Reflected XSS

CVE ID : CVE-2025-10567

Published : Nov. 5, 2025, 6 a.m. | 18 minutes ago

Description : The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…