Funnelkit
Funnelkit Funnel Builder: vulnerabilidades y CVE
Funnelkit Funnel Builder tiene 13 vulnerabilidades publicadas, 5 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses5
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-57816 | Alta (7.1) | 0.25% | — | 13 jul 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by… |
| CVE-2026-56052 | Alta (7.6) | 0.38% | — | 24 jun 2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit:… |
| CVE-2026-48966 | Alta (7.1) | 0.25% | — | 15 jun 2026 | Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions. |
| CVE-2026-42381 | Crítica (9.3) | 0.40% | — | 15 jun 2026 | Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions. |
| CVE-2025-66067 | Media (6.5) | 0.20% | — | 21 nov 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit:… |
| CVE-2025-54750 | Alta (7.5) | 0.63% | — | 20 ago 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects… |
| CVE-2025-49034 | Alta (7.6) | 0.29% | — | 16 jul 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit:… |
| CVE-2025-2203 | Media (6.1) | 0.26% | — | 15 may 2025 | The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks |
| CVE-2025-26979 | Alta (7.5) | 0.80% | — | 25 feb 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects… |
| CVE-2024-1056 | Media (5.4) | 0.26% | — | 29 ago 2024 | The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe_tag_in_post' function which uses the 'wp_kses_allowed_html' filter to globally allow script and… |
| CVE-2024-6836 | Media (4.3) | 0.32% | — | 24 jul 2024 | The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells plugin for WordPress is vulnerable to unauthorized modification of data due to… |
| CVE-2024-5192 | Media (5.4) | 0.33% | — | 29 jun 2024 | The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… |
| CVE-2023-50856 | Alta (7.2) | 0.54% | — | 28 dic 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels &… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Funnelkit
Funnelkit Automations · 10Slingblocks · 3Funnelkit · 3Funnelkit Checkout · 3Funnel Builder FOR Woocommerce Checkout · 2Funnel Builder PRO · 2Automations Email Marketing Automation AND CRM FOR Wordpress AND Woocommerce · 1Funnelkit Funnel Builder FOR Woocommerce Checkout · 1Payment Gateway FOR Stripe Woocommerce · 1Recover Woocommerce Cart Abandonment · 1