WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
funnel-builder
Published
2025-07-08
Title
Funnel Builder by FunnelKit < 3.11.0 - Authenticated (Administrator+) SQL Injection
Slug
funnel-builder
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Slug
funnel-builder
Published
2025-08-19
Title
Funnel Builder by FunnelKit < 3.12.0 - Unauthenticated Local File Inclusion
Slug
funnel-builder
Published
2025-10-15
Title
FunnelKit < 3.12.0.1 - Reflected XSS
Slug
funnel-builder
Published
2025-11-18
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.13.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode
Slug
funnel-builder
Published
2025-12-06
Title
Funnel Builder by FunnelKit < 3.13.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
funnel-builder
Published
2025-12-11
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.13.1.6 - Unauthenticated SQL Injection
Slug
funnel-builder-pro
Published
2024-08-28
Title
Funnel Kit Funnel Builder PRO < 3.5.0 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
Slug
funnelcockpit
Published
2025-04-04
Title
FunnelCockpit < 1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
funnelcockpit
Published
2025-05-09
Title
FunnelCockpit < 1.4.4 - Reflected Cross-Site Scripting
Slug
funnelcockpit
Published
2025-07-23
Title
FunnelCockpit < 1.4.4 - Reflected Cross-Site Scripting via `error` Parameter
Slug
funnelforms-free
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
funnelforms-free
Published
2023-09-12
Title
Funnelforms Free < 3.4 Unauthenticated Stored Cross-Site Scripting
Slug
funnelforms-free
Published
2023-11-13
Title
Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Category Update
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Test Email Sending
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to New Category Creation
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Post Modification
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Category Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Enable/Disable Dark Mode
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2024-08-27
Title
Funnelforms Free < 3.7.4.1 - Authenticated (Administrator+) Arbitrary File Deletion