| CVE-2026-12979 |
The FunnelKit WordPress plugin before 3.15.0.6 does not validate a user-supplied path before deleting a file during a…
|
5.5
Medium
|
Jul 16, 2026 |
| CVE-2026-12978 |
The FunnelKit WordPress plugin before 3.15.0.6 does not escape a user-supplied parameter before reflecting it into…
|
7.1
High
|
Jul 16, 2026 |
| CVE-2025-10567 |
The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its…
|
6.3
Medium
|
Nov 5, 2025 |
| CVE-2025-2203 |
The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL…
|
6.1
Medium
|
May 15, 2025 |