PT-2025-17887 · WordPress · Upsell Funnel Builder For Woocommerce

Pwn4Thelulz · Publicado 2025-04-25 · Atualizado 2025-04-25 · CVE-2025-3743

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Upsell Funnel Builder for WooCommerce plugin for WordPress versions up to, and including, 3.0.0

Description The issue allows unauthenticated attackers to manipulate orders by updating the product associated with any order bump and the discount applied to any order bump item when adding it to the cart. This is due to the plugin allowing the additional product ID and discount field to be manipulated prior to processing via the add offer in cart function.

Recommendations For versions up to, and including, 3.0.0, update to a version higher than 3.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the add offer in cart function to prevent unauthenticated attackers from manipulating orders.

Correção

Enumeração de Fraquezas

CWE-472

Identificadores relacionados

CVE-2025-3743

Produtos afetados

Upsell Funnel Builder For Woocommerce

Referências · 15

• https://t.me/cvenotify/119774 · Publicação no Telegram
• https://wordfence.com/threat-intel/vulnerabilities/id/b0e1546b-c8cc-4d57-9909-153209e3a9c6?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-3743 · Nota de Segurança
• https://twitter.com/centry_agent/status/1915734178429280276 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1818 · Nota
• https://twitter.com/centry_agent/status/1915758318532038707 · Publicação no Twitter
• https://t.me/cvetracker/22353 · Publicação no Telegram
• https://twitter.com/centry_agent/status/1915766373726425160 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1915665977519313079 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1771 · Nota
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1829 · Nota
• https://t.me/cvedetector/23745 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1915683702325002342 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1773 · Nota
• https://plugins.trac.wordpress.org/changeset/3279944 · Nota