Log in Start free

FunnelKit

Products

ProductCVEsExploitedLatest
Funnel Builder by FunnelKit4–Jul 13, 2026
FunnelKit Checkout3–Jun 12, 2024
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits1–Dec 28, 2023
FunnelKit Funnel Builder Pro1–Aug 29, 2024
FunnelKit Payment Gateway for Stripe WooCommerce1–Jun 26, 2026
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit1–Dec 28, 2023
Automation By Autonami1–Mar 21, 2024
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)1–Jul 20, 2024
Funnel Builder for WooCommerce Checkout1–May 19, 2026

Exploited and recent CVEs

  • CVE-2026-57816 High 7.1 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57635 Medium 6.5 WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-56052 High 7.6 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability 0.4%
  • CVE-2026-48966 High 7.1 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-42381 Critical 9.3 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability 0.3%
  • CVE-2026-47100 High 7.5 Funnel Builder for WooCommerce Checkout < 3.15.0.3 Missing Authorization via AJAX 0.5%
  • CVE-2024-1056 Medium 6.4 Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post 0.3%
  • CVE-2024-38684 Medium 6.5 WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-51670 Medium 4.3 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability 0.3%
  • CVE-2023-51671 Medium 5.4 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability 0.3%
  • CVE-2023-51672 High 7.5 WordPress FunnelKit Checkout plugin <= 3.10.3 - Unauthenticated Arbitrary Post/Page Deletion vulnerability 0.5%
  • CVE-2024-2580 Medium 6.5 WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-50856 High 7.6 WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 2.14.3 is vulnerable to SQL Injection 0.5%
  • CVE-2023-50857 High 7.6 WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection 0.5%