FunnelKit kayıtları
funnelkit üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2025-1562Kavram kanıtı | Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrafunnelkit · funnelkit automations · CWE-862 | Kritik9,8 | — | %3,3 | 18 Haz 2025 |
35İzleyin | CVE-2024-9186Kavram kanıtı | Automation By Autonami < 3.3.0 - Unauthenticated SQLifunnelkit · funnelkit automations · CWE-89 | Yüksek8,6 | — | %2,3 | 14 Kas 2024 |
30İzleyin | CVE-2023-51672İstismar yok | WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerabilityfunnelkit · funnelkit checkout · CWE-862 | Yüksek7,5 | — | %0,5 | 10 Nis 2024 |
28İzleyin | CVE-2023-50856İstismar yok | WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injectionfunnelkit · funnel builder · CWE-89 | Yüksek7,2 | — | %0,5 | 28 Ara 2023 |
28İzleyin | CVE-2023-50857İstismar yok | WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injectionfunnelkit · funnelkit automations · CWE-89 | Yüksek7,2 | — | %0,5 | 28 Ara 2023 |
28İzleyin | CVE-2024-47328İstismar yok | WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerabilityfunnelkit · funnelkit automations · CWE-89 | Yüksek7,2 | — | %0,5 | 21 Eki 2024 |
24İzleyin | CVE-2025-2203İstismar yok | WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injectionfunnelkit · funnel builder · CWE-89 | Orta6,1 | — | %0,3 | 15 May 2025 |
21İzleyin | CVE-2025-12468İstismar yok | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposurefunnelkit · funnelkit automations · CWE-200 | Orta5,3 | — | %0,3 | 5 Kas 2025 |
21İzleyin | CVE-2023-51671İstismar yok | WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerabilityfunnelkit · funnelkit checkout · CWE-862 | Orta5,4 | — | %0,3 | 12 Haz 2024 |
21İzleyin | CVE-2024-5192İstismar yok | Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticatedfunnelkit · funnel builder · CWE-79 | Orta5,4 | — | %0,3 | 29 Haz 2024 |
21İzleyin | CVE-2024-1056İstismar yok | Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_postfunnelkit · funnel builder · CWE-79 | Orta5,4 | — | %0,3 | 29 Ağu 2024 |
21İzleyin | CVE-2024-13675İstismar yok | SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingfunnelkit · slingblocks · CWE-79 | Orta5,4 | — | %0,2 | 8 Mar 2025 |
17İzleyin | CVE-2022-2389İstismar yok | Automations By Autonami < 2.1.2 - Subscriber+ Automation Creationfunnelkit · funnelkit automations · CWE-352 | Orta4,3 | — | %0,4 | 22 Ağu 2022 |
17İzleyin | CVE-2024-6836İstismar yok | Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authofunnelkit · funnel builder · CWE-862 | Orta4,3 | — | %0,3 | 24 Tem 2024 |
17İzleyin | CVE-2023-51670İstismar yok | WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerabilityfunnelkit · funnelkit checkout · CWE-862 | Orta4,3 | — | %0,3 | 12 Haz 2024 |
17İzleyin | CVE-2025-12469İstismar yok | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrafunnelkit · funnelkit automations · CWE-862 | Orta4,3 | — | %0,2 | 5 Kas 2025 |
- CVE-2025-156240Planlayın
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitra
KritikCVSS 9,8Kavram kanıtıEPSS %3funnelkit · funnelkit automations18 Haz 2025
- CVE-2024-918635İzleyin
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
YüksekCVSS 8,6Kavram kanıtıEPSS %2funnelkit · funnelkit automations14 Kas 2024
- CVE-2023-5167230İzleyin
WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1funnelkit · funnelkit checkout10 Nis 2024
- CVE-2023-5085628İzleyin
WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1funnelkit · funnel builder28 Ara 2023
- CVE-2023-5085728İzleyin
WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection
YüksekCVSS 7,2İstismar yokEPSS %1funnelkit · funnelkit automations28 Ara 2023
- CVE-2024-4732828İzleyin
WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability
YüksekCVSS 7,2İstismar yokEPSS %0funnelkit · funnelkit automations21 Eki 2024
- CVE-2025-220324İzleyin
WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injection
OrtaCVSS 6,1İstismar yokEPSS %0funnelkit · funnel builder15 May 2025
- CVE-2025-1246821İzleyin
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure
OrtaCVSS 5,3İstismar yokEPSS %0funnelkit · funnelkit automations5 Kas 2025
- CVE-2023-5167121İzleyin
WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0funnelkit · funnelkit checkout12 Haz 2024
- CVE-2024-519221İzleyin
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated
OrtaCVSS 5,4İstismar yokEPSS %0funnelkit · funnel builder29 Haz 2024
- CVE-2024-105621İzleyin
Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post
OrtaCVSS 5,4İstismar yokEPSS %0funnelkit · funnel builder29 Ağu 2024
- CVE-2024-1367521İzleyin
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0funnelkit · slingblocks8 Mar 2025
- CVE-2022-238917İzleyin
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
OrtaCVSS 4,3İstismar yokEPSS %0funnelkit · funnelkit automations22 Ağu 2022
- CVE-2024-683617İzleyin
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Autho
OrtaCVSS 4,3İstismar yokEPSS %0funnelkit · funnel builder24 Tem 2024
- CVE-2023-5167017İzleyin
WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0funnelkit · funnelkit checkout12 Haz 2024
- CVE-2025-1246917İzleyin
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitra
OrtaCVSS 4,3İstismar yokEPSS %0funnelkit · funnelkit automations5 Kas 2025