CyberRota Analysis
AI-GeneratedThe WPFunnels WordPress plugin prior to version 3.13.0 is vulnerable to an issue where it fails to verify the product associated with a checkout order bump, allowing unauthenticated users to exploit this flaw and purchase any product at a discount not intended for that item. This can lead to unauthorized financial losses for businesses as customers can manipulate pricing during checkout. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduced price carried through to the total of the order they place.