Plugin icon

FunnelKit – Funnel Builder for WooCommerce Checkout

funnel-builder

Vulnerabilities:

13

Last Updated:

May 13, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-04-27
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.15.0.2 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.15.0.2
CVSS
7.5 (high)
Published
2025-12-11
Title
FunnelKit < 3.14.0.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.14.0.3
CVSS
7.5 (high)
Published
2025-12-06
Title
Funnel Builder by FunnelKit < 3.13.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.13.1.3
CVSS
6.4 (medium)
Published
2025-11-18
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.13.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode
Fixed in
Fixed in 3.13.1.3
CVSS
6.4 (medium)
Published
2025-10-15
Title
FunnelKit < 3.12.0.1 - Reflected XSS
Fixed in
Fixed in 3.12.0.1
CVSS
7.1 (high)
Published
2025-08-19
Title
Funnel Builder by FunnelKit < 3.12.0 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 3.12.0
CVSS
8.1 (high)
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Fixed in
Fixed in 3.11.1
CVSS
8.8 (high)
Published
2025-07-08
Title
Funnel Builder by FunnelKit < 3.11.0 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 3.11.0
CVSS
4.9 (medium)
Published
2025-02-23
Title
Funnel Builder by FunnelKit < 3.9.1 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 3.9.1
CVSS
9.8 (critical)
Published
2025-01-08
Title
WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injection
Fixed in
Fixed in 3.10.2
CVSS
4.1 (medium)
Published
2024-07-23
Title
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells < 3.4.7 - Missing Authorization to Authenticated (Contributor+) Settings Update
Fixed in
Fixed in 3.4.7
CVSS
4.3 (medium)
Published
2024-06-28
Title
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells < 3.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Fixed in
Fixed in 3.4.0
CVSS
6.4 (medium)
Published
2023-12-21
Title
Funnel Builder for WordPress by FunnelKit < 2.14.4 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 2.14.4
CVSS
6.6 (medium)