Skip to content
OpenAdvisories

Vendor

FunnelKit

14 known vulnerabilities.

Products

Funnel Builder by FunnelKit 4 FunnelKit Checkout 3 SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) 1 Funnel Builder for WooCommerce Checkout 1 FunnelKit Funnel Builder Pro 1 Automation By Autonami 1 FunnelKit Payment Gateway for Stripe WooCommerce 1 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels & Maximize Profits 1 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57635

    WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in FunnelKit Payment Gateway for Stripe WooCommerce <= 1.14.0.3 versions.

    FunnelKit FunnelKit Payment Gateway for Stripe WooCommerce Web / CMS
  • Medium 6.4
    CVE-2024-1056

    Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post

    The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe_tag_in_post' function which uses the 'wp_kses_allowed_html' filter to globally allow script and iframe tags in posts in all versions up to…

    FunnelKit FunnelKit Funnel Builder Pro Web / CMS
  • Medium 6.5
    CVE-2024-38684

    WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by Fun…

    FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)
  • Medium 4.3
    CVE-2023-51670

    WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

    FunnelKit FunnelKit Checkout
  • Medium 5.4
    CVE-2023-51671

    WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

    Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3.

    FunnelKit FunnelKit Checkout
  • Medium 6.5
    CVE-2024-2580

    WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Automation By Autonami allows Stored XSS.This issue affects Automation By Autonami: from n/a through 2.8.2.

    FunnelKit Automation By Autonami