CVE-2026-12979

The FunnelKit WordPress plugin (versions before 3.15.0.6 ) is vulnerable to a path traversal flaw during a template-import operation. The software fails to validate user-supplied paths before deleting files, allowing users with administrator privileges to delete arbitrary .json files outside the ...