WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-47152

5.4MEDIUM

Key Information:

Vendor: WordPress
Status: Clickfunnels
Vendor: CVE Published:; 24 May 2023

🔔 Create WordPress Vulnerability Alert

What is CVE-2022-47152?

Cross-Site Request Forgery (CSRF) vulnerability in Etison, LLC ClickFunnels plugin <= 3.1.1 versions.

Affected Version(s)

ClickFunnels <= 3.1.1

References

https://patchstack.com/database/vulnerability/clickfunnel...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
May 24, 2023
Vulnerability Reserved
Dec 12, 2022

Credit

rezaduty (Patchstack Alliance)

.

CVE-2022-47152 : WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)