Funnelkit Funnel Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Funnelkit Funnel Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-50856 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder for…
• CVE-2024-1056 — CVSS 6.4 (medium): The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe_tag_in_post'…
• CVE-2024-5192 — CVSS 6.4 (medium): The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click…
• CVE-2025-2203 — CVSS 6.1 (medium): The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins…
• CVE-2024-6836 — CVSS 4.3 (medium): The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click…