g-FFL Cockpit
g-FFL Cockpit has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Improper Authorization, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for g-FFL Cockpit has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Ryan Kozak. g-FFL Cockpit is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-12720g-FFL Cockpit <= 1.7.1 - Improper Authorization to Unauthenticated Product Deletion
Read the full analysisVulnerability Records
g-FFL Cockpit
Author
garidium
Built by a FFL, for FFL’s. This plugin will synchronize site inventory and automate order fulfillment with multiple firearm distributors. It was built to support our businesses, and we know it will help yours. Please contact us at sales@garidium.com before purchasing a license key so we can discuss your needs. Feature Highlights Configure 1-to-many supported distributors and feed products into your WooCommerce website. We currently support over a dozen distributors and counting.. Fulfillment automation, to automate Drop-shipping Workflow Fulfillment automation includes monitoring distributors for shipping updates, and notifying both you and your customer. This plugin also supports feeding product to AmmoSeek, Gunbroker, Gun.deals, WikiArms, Armsagora, AmmoBrowser, and GunAmmo.deals Inventory and Listings are then updated every 20-minutes to ensure quantity and pricing are updated continuously. Easily set pricing and listing options, along with configuring the inclusion/exclusion of specific items. Keep your customers updated on the order status with configurable email templates View a report of all items being listed, including pricing from each distributor, there is also an Excel export. Works tightly with the g-FFL Checkout plugin to automatically mark firearms as requiring FFL selection during checkout. Integrated Help Videos and Help Center Integrated Log files, so you can monitor the status of your inventory synchronization Fulfillment Reports Subscription Required While the plugin is free to download and install, it does require you to purchase a license for a personalized API key. We also have a one-time setup fee. The plugin will not be useful without this key. The API key allows the plugin to connect to the required data services, providing the following features: Access to a data services we manage that synchronizes distributor product data Ability to create fulfillment orders To purchase a key, visit the FFL Cockpit product page: FFL Cockpit Product Page Please review our Terms and Conditions: Terms and Conditions
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C