PatchTheCVEfunnelkit vulnerabilities
Recent CVEs affecting funnelkit products. 12 tracked.
funnelkit has 12 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 12. Most recent: 2025-11-05. Highest priority: CVE-2025-1562 (score 61/100).
- CVE-2025-12468 MEDIUM 5.3 UPGRADE The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPres
- CVE-2025-12469 MEDIUM 4.3 UPGRADE The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPres
- CVE-2025-2203 MEDIUM 6.1 UPGRADE The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQ
- CVE-2025-1562 CRITICAL 9.8 UPGRADE The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugi
- CVE-2024-9186 HIGH 8.6 UPGRADE The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordP
- CVE-2024-6836 MEDIUM 4.3 UPGRADE The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Or
- CVE-2024-5192 MEDIUM 6.4 UPGRADE The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Or
- CVE-2024-47328 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Fun
- CVE-2024-1056 MEDIUM 6.4 UPGRADE The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'al
- CVE-2024-13675 MEDIUM 6.4 UPGRADE The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to St
- CVE-2023-51671 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: fro
- CVE-2023-51670 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: fro
FAQ
How do I fix funnelkit vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funnelkit being exploited right now?
None of the tracked funnelkit CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funnelkit CVE should I patch first?
CVE-2025-1562 currently ranks highest (61/100): The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugi.