CVE-2025-12468 | FunnelKit Automations Plugin up to 3.6.4.1 on WordPress REST API Endpoint /wc-coupons/ information disclosure

November 5, 2025 Yanac

A vulnerability was found in FunnelKit Automations Plugin up to 3.6.4.1 on WordPress. It has been classified as problematic. This affects an unknown part of the file /wc-coupons/ of the component REST API Endpoint. Performing manipulation results in information disclosure.

This vulnerability is known as CVE-2025-12468. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More