Input validation vulnerability in FunnelKit – Funnel Builder for WooCommerce Checkout 3.11.1

The Funnel Builder plugin for WordPress, called FunnelKit, has a flaw in versions 3.11.1 and lower. This flaw allows hackers to access and run any files they want on the server, even if they are not authorized. This can be used to get around security measures, get private information, or run any code they want. It can even happen with files that are typically considered safe, like images.