VendorsFunnelKitfunnel_builderall versions
Vulnerabilities

FunnelKit Funnel Builder

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2023-50856
WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection
Published 2023-12-28 · Modified
7.6EPSS 0.005
CVE-2024-5192
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Published 2024-06-29 · Modified
6.4EPSS 0.003
CVE-2024-1056
Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
Published 2024-08-29 · Analyzed
6.4EPSS 0.003
CVE-2025-2203
WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injection
Published 2025-05-15 · Analyzed
6.1EPSS 0.003
CVE-2024-6836
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update
Published 2024-07-24 · Modified
4.3EPSS 0.003