Approved changes feed: RSS · Atom

cpe:2.3:a:funnelkit:funnel_builder_by_funnelkit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFunnelkit (25092b83-a3d8-56e8-bd8b-cc65ffeaaa8c)
ProductFunnel Builder By Funnelkit (cb01ab6b-d9a4-5ea4-aac6-0f77c223e86a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57816 vulnerable 2026-07-29 01:03:16.320955 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.15.0.8.
Published: 2026-07-13T08:41:25.624Z
Updated: 2026-07-13T14:38:09.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-56052 vulnerable 2026-07-29 01:00:28.816382 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.
Published: 2026-06-24T07:23:45.781Z
Updated: 2026-06-24T12:22:06.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48966 vulnerable 2026-07-29 00:55:01.814094 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.
Published: 2026-06-15T20:19:07.824Z
Updated: 2026-06-16T01:21:31.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42381 vulnerable 2026-07-29 00:49:31.906356 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in Funnel Builder by FunnelKit <= 3.15.0.1 versions.
Published: 2026-06-15T20:18:32.706Z
Updated: 2026-06-16T12:31:15.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49034 vulnerable 2026-06-08 07:29:12.490182 WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.10.2.
Published: 2025-07-16T11:27:59.710Z
Updated: 2026-04-28T16:12:57.795Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.