Log in Start free

amans2k

Products

ProductCVEsExploitedLatest
FunnelKit – Funnel Builder for WooCommerce Checkout5–Dec 12, 2025
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce5–Nov 5, 2025
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)2–Aug 21, 2025
Bonanza – WooCommerce Free Gifts Lite1–Jul 29, 2025

Exploited and recent CVEs

  • CVE-2025-14169 High 7.5 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection 0.4%
  • CVE-2025-12878 Medium 6.4 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode 0.3%
  • CVE-2025-12469 Medium 4.3 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending 0.3%
  • CVE-2025-12468 Medium 5.3 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure 0.4%
  • CVE-2025-8607 Medium 6.4 SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-7654 High 8.8 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library 0.6%
  • CVE-2025-7654 High 8.8 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library 0.6%
  • CVE-2025-6730 Medium 4.3 Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success 0.2%
  • CVE-2025-1562 Critical 9.8 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation 3.3%
  • CVE-2025-2186 High 7.5 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' 0.5%
  • CVE-2024-13675 Medium 6.4 SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-6836 Medium 4.3 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update 0.3%
  • CVE-2024-5192 Medium 6.4 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload 0.3%