6.5
Medium
CVE-2026-57635 Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe…
Description
Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FunnelKit Payment Gateway for Stripe WooCommerce 1.14 | earliest → 1.14.0.3 | No fix stated |