Skip to content
Noroxi

FunnelKit records

16 published records for vendor funnelkit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
50%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

16 records
  • CVE-2025-1562
    40Plan

    Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitra

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    funnelkit · funnelkit automationsJun 18, 2025

  • CVE-2024-9186
    35Monitor

    Automation By Autonami < 3.3.0 - Unauthenticated SQLi

    HighCVSS 8.6Proof of conceptEPSS 2%

    funnelkit · funnelkit automationsNov 14, 2024

  • CVE-2023-51672
    30Monitor

    WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    funnelkit · funnelkit checkoutApr 10, 2024

  • CVE-2023-50856
    28Monitor

    WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    funnelkit · funnel builderDec 28, 2023

  • CVE-2023-50857
    28Monitor

    WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    funnelkit · funnelkit automationsDec 28, 2023

  • CVE-2024-47328
    28Monitor

    WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    funnelkit · funnelkit automationsOct 21, 2024

  • CVE-2025-2203
    24Monitor

    WooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL Injection

    MediumCVSS 6.1No exploitEPSS 0%

    funnelkit · funnel builderMay 15, 2025

  • CVE-2025-12468
    21Monitor

    FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure

    MediumCVSS 5.3No exploitEPSS 0%

    funnelkit · funnelkit automationsNov 5, 2025

  • CVE-2023-51671
    21Monitor

    WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    funnelkit · funnelkit checkoutJun 12, 2024

  • CVE-2024-5192
    21Monitor

    Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated

    MediumCVSS 5.4No exploitEPSS 0%

    funnelkit · funnel builderJun 29, 2024

  • CVE-2024-1056
    21Monitor

    Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post

    MediumCVSS 5.4No exploitEPSS 0%

    funnelkit · funnel builderAug 29, 2024

  • CVE-2024-13675
    21Monitor

    SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    funnelkit · slingblocksMar 8, 2025

  • CVE-2022-2389
    17Monitor

    Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation

    MediumCVSS 4.3No exploitEPSS 0%

    funnelkit · funnelkit automationsAug 22, 2022

  • CVE-2024-6836
    17Monitor

    Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Autho

    MediumCVSS 4.3No exploitEPSS 0%

    funnelkit · funnel builderJul 24, 2024

  • CVE-2023-51670
    17Monitor

    WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    funnelkit · funnelkit checkoutJun 12, 2024

  • CVE-2025-12469
    17Monitor

    FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitra

    MediumCVSS 4.3No exploitEPSS 0%

    funnelkit · funnelkit automationsNov 5, 2025