Skip to content
OpenAdvisories
High · 7.6 CVE-2026-56052 EUVD-2026-38713GHSA-rj87-rfcc-35pw

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

Published Jun 24, 2026 · Updated Jun 24, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection.

This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.

Affected products

VendorProductAffectedFixed
FunnelKit Funnel Builder by FunnelKit ≤ 3.15.0.5 —

References