FunnelKit Funnel Builder by FunnelKit vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting FunnelKit Funnel Builder by FunnelKit: 4 record(s), with affected versions and fixes.

CVE-2026-57816 High · 7.1 CWE-79 Jul 13, 2026

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.15.0.8.

CVE-2026-56052 High · 7.6 CWE-89 Jun 24, 2026

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.

CVE-2026-48966 High · 7.1 CWE-79 Jun 15, 2026

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.

CVE-2026-42381 Critical · 9.3 CWE-89 Jun 15, 2026

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.