WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
funnel-builder
Published
2026-06-24
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.15.0.6 - Authenticated (Administrator+) SQL Injection
Slug
funnel-builder
Published
2026-06-25
Title
FunnelKit < 3.15.0.6 - Admin+ Arbitrary File Deletion via Path Traversal in Template Importer
Slug
funnel-builder
Published
2026-07-10
Title
FunnelKit – Funnel Builder for WooCommerce Checkout < 3.15.0.9 - Unauthenticated Stored Cross-Site Scripting
Slug
funnel-builder-pro
Published
2024-08-28
Title
Funnel Kit Funnel Builder PRO < 3.5.0 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
Slug
funnel-builder-pro
Published
2026-07-07
Title
FunnelKit Funnel Builder Pro < 3.15.0.8 - Unauthenticated Stored Cross-Site Scripting
Slug
funnel-builder-pro
Published
2026-07-07
Title
FunnelKit Funnel Builder Pro < 3.15.0.5 - Authenticated (Customer+) Stored Cross-Site Scripting
Slug
funnelcockpit
Published
2025-04-04
Title
FunnelCockpit < 1.4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
funnelcockpit
Published
2025-05-09
Title
FunnelCockpit < 1.4.4 - Reflected Cross-Site Scripting
Slug
funnelcockpit
Published
2025-07-23
Title
FunnelCockpit < 1.4.4 - Reflected Cross-Site Scripting via `error` Parameter
Slug
funnelforms-free
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
funnelforms-free
Published
2023-09-12
Title
Funnelforms Free < 3.4 Unauthenticated Stored Cross-Site Scripting
Slug
funnelforms-free
Published
2023-11-13
Title
Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Category Update
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Test Email Sending
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to New Category Creation
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Post Modification
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Category Deletion
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Enable/Disable Dark Mode
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Cross-Site Request Forgery to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2023-11-01
Title
Funnelforms Free < 3.4.2 - Missing Authorization to Arbitrary Post Duplication
Slug
funnelforms-free
Published
2024-08-27
Title
Funnelforms Free < 3.7.4.1 - Authenticated (Administrator+) Arbitrary File Deletion
Slug
funnelforms-free
Published
2024-08-27
Title
Funnelforms Free < 3.7.4.1 - Authenticated (Administrator+) Arbitrary File Upload
Slug
funnelforms-free
Published
2024-08-27
Title
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free < 3.7.4.1 - Missing Authorization to Unauthenticated Arbitrary Media Upload