Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

FunnelKit – Funnel Builder for WooCommerce Checkout — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in FunnelKit – Funnel Builder for WooCommerce Checkout, with AI-generated Chinese analysis, references, and POCs.

Vendor: amans2k

CVE IDTitleCVSSSeverityPublished
CVE-2025-14169 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection CWE-89 7.5 High2025-12-12
CVE-2025-12878 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode CWE-79 6.4 Medium2025-11-19
CVE-2024-6836 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update CWE-862 4.3 Medium2024-07-24
CVE-2024-5192 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload CWE-79 6.4 Medium2024-06-29

All 4 known CVE vulnerabilities affecting FunnelKit – Funnel Builder for WooCommerce Checkout with full Chinese analysis, references, and POCs where available.