FunnelKit WooCommerce Cart Abandonment Plugin Missing Authorization Vulnerability Allowing Unauthenticated Arbitrary Plugin Installation

A vulnerability exists in the FunnelKit plugin for WordPress, specifically in the Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, and Marketing Automation components, all versions through 3.5.3. The issue arises from a lack of proper capability checks in the 'install_or_activate_addon_plugins' function, combined with a weak nonce hash. This flaw enables unauthenticated attackers to install arbitrary plugins on the site, potentially leading to further infections.

Impact

Exploitation of this vulnerability allows for unauthorized installation of plugins, which could be used to compromise the site further.

Remediation

Users are advised to update the FunnelKit WordPress plugin to version 3.6.0 or later.