FunnelKit vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20246
3. 20266

Newest CVEs

• CVE-2026-57816

  WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability

  FunnelKit · Funnel Builder by FunnelKit

  High7.1
• CVE-2026-57635

  WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

  FunnelKit · FunnelKit Payment Gateway for Stripe WooCommerce

  Medium6.5
• CVE-2026-56052

  WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

  FunnelKit · Funnel Builder by FunnelKit

  High7.6
• CVE-2026-48966

  WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability

  FunnelKit · Funnel Builder by FunnelKit

  High7.1
• CVE-2026-42381

  WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability

  FunnelKit · Funnel Builder by FunnelKit

  Critical9.3
• CVE-2026-47100

  Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX

  FunnelKit · Funnel Builder for WooCommerce Checkout

  High8.7
• CVE-2024-1056

  Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post

  FunnelKit · FunnelKit Funnel Builder Pro

  Medium6.4
• CVE-2024-38684

  WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

  FunnelKit · SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

  Medium6.5
• CVE-2023-51670

  WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

  FunnelKit · FunnelKit Checkout

  Medium4.3
• CVE-2023-51671

  WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

  FunnelKit · FunnelKit Checkout

  Medium5.4