Executive Summary

This vulnerability exists in the FunnelKit Automations plugin for WordPress and WooCommerce, where the plugin fails to properly verify if a user is authorized to perform certain administrative actions in the 'bwfan_test_email' AJAX handler. The nonce (a security token) used for verification is publicly exposed to all visitors, including unauthenticated users, and the verification function accepts low-privilege authenticated users (such as Subscribers) who have this nonce. As a result, attackers with Subscriber-level access or higher can send arbitrary emails from the site with attacker-controlled subject and body content.

Useful 0 Not Useful 0

Impact Analysis

An attacker with Subscriber-level access or higher can exploit this vulnerability to send arbitrary emails from your site. This could lead to phishing attacks, spam distribution, or impersonation of legitimate site communications, potentially damaging your site's reputation and trustworthiness.

Useful 0 Not Useful 0