Description
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FunnelKit | Funnel Builder by FunnelKit | ≤ 3.15.0.2 | — |
High · 7.1
CVE-2026-48966
EUVD-2026-36865GHSA-r6wf-xf46-772h
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack