Skip to content

Funnelkit vulnerabilities

Products

Newest

funnelkit payment gateway for stripe woocommerce, teamfunnelkit funnelkit payment gateway for stripe woocommerce +1 more FunnelKit Payment Gateway for Stripe WooCommerce <= 1.15.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via 'order-pay' URL Path Parameter CVE-2026-109991 7.5 HighNovember 7, 2026
funnelkit funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-57816 7.1 HighJuly 13, 2026
funnelkit payment gateway for stripe woocommerce WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-57635 6.5 MediumJune 26, 2026
funnelkit funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability CVE-2026-56052 7.6 HighJune 24, 2026
funnelkit funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-48966 7.1 HighJune 15, 2026
funnelkit funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability CVE-2026-42381 9.3 CriticalJune 15, 2026
funnelkit funnel builder for woocommerce checkout Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX CVE-2026-47100 Public exploit 8.7 HighMay 19, 2026
aman funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-66067 6.5 MediumNovember 21, 2025
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending CVE-2025-12469 4.3 MediumNovember 5, 2025
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure CVE-2025-12468 5.3 MediumNovember 5, 2025
aman funnel builder by funnelkit WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability CVE-2025-54750 7.5 HighAugust 20, 2025
aman funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability CVE-2025-49034 7.6 HighJuly 16, 2025
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation CVE-2025-1562 Public exploit 9.8 CriticalJune 18, 2025
funnelkit funnel builder, unknown funnelkit +1 more WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injection CVE-2025-2203 6.1 MediumMay 15, 2025
amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels), funnelkit slingblocks +1 more SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13675 6.4 MediumMarch 8, 2025
aman funnel builder by funnelkit WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability CVE-2025-26979 7.5 HighFebruary 25, 2025
unknown recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, funnelkit automations +1 more Automation By Autonami < 3.3.0 - Unauthenticated SQLi CVE-2024-9186 8.6 HighNovember 14, 2024
aman funnelkit automations, funnelkit automations +1 more WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability CVE-2024-47328 7.6 HighOctober 21, 2024
funnelkit funnel builder, funnel builder pro +1 more Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post CVE-2024-1056 6.4 MediumAugust 29, 2024
funnelkit funnel builder, amans2k funnelkit – funnel builder for woocommerce checkout +1 more Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+)… CVE-2024-6836 4.3 MediumJuly 24, 2024
amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels) WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-38684 6.5 MediumJuly 20, 2024
funnelkit funnel builder, amans2k funnelkit – funnel builder for woocommerce checkout +1 more Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting v… CVE-2024-5192 6.4 MediumJune 29, 2024
funnelkit checkout WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability CVE-2023-51670 4.3 MediumJune 12, 2024
funnelkit checkout WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability CVE-2023-51671 5.4 MediumJune 12, 2024
funnelkit checkout WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability CVE-2023-51672 7.5 HighMarch 21, 2024
funnelkit automation by autonami WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-2580 6.5 MediumMarch 21, 2024
funnelkit funnel builder for wordpress by funnelkit – customize woocommerce checkout pages, create sales funnels & maximize profits, funnel builder +1 more WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection CVE-2023-50856 7.6 HighDecember 28, 2023
funnelkit recover woocommerce cart abandonment, newsletter, email marketing, marketing automation by funnelkit, automations +1 more WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection CVE-2023-50857 7.6 HighDecember 28, 2023
funnelkit automations, unknown abandoned cart recovery for woocommerce, follow up emails, newsletter builder & marketing automation by autonami +1 more Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation CVE-2022-2389 4.3 MediumAugust 22, 2022