Skip to content
Noroxi

Funnel Builder by FunnelKit

funnel-builder · plugin

Known security vulnerabilities for Funnel Builder by FunnelKit. Find out in seconds which version runs on your site with WP Lens.

15 known vulnerabilities

1 critical · 1 with public exploit code · latest Jul 13, 2026

Vulnerabilities

  • CVE-2026-42381

    WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2025-7654

    Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library

    High 8.8

  • CVE-2026-47100→ 3.15.0.3

    Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX

    High 8.7

  • CVE-2026-56052

    WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

    High 7.6

  • CVE-2025-49034

    WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability

    High 7.6

  • CVE-2025-14169

    FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection

    High 7.5

  • CVE-2025-54750

    WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability

    High 7.5

  • CVE-2025-26979

    WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2023-50856

    WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection

    High 7.2

  • CVE-2026-57816

    WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-48966

    WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-66067

    WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-12878

    FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode

    Medium 6.4

  • CVE-2024-5192

    Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated

    Medium 5.4

  • CVE-2024-6836

    Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Autho

    Medium 4.3

← Back to directory