CVE-2026-12979

The FunnelKit WordPress plugin before version 3.15.0.6 is vulnerable to path traversal during a template-import operation. The flaw occurs because the plugin fails to validate a user-supplied path before deleting a file. This allows users with administrator privileges to delete arbitrary .json fi...