CVE-2024-38684

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

CVE-2024-38684 WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

CVE-2024-38684

CVE-2024-38684 is a stored XSS in the WordPress plugin SlingBlocks – Gutenberg Blocks by FunnelKit (formerly WooFunnels). The vulnerability affects SlingBlocks – Gutenberg Blocks by FunnelKit: from n/a to version 1.4.1. Root cause is improper input neutralization during web page generation, enabl...

CVE-2024-38684 WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in FunnelKit SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels allows Stored XSS.This issue affects SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels: from n/a throu...

WordPress SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)

Software SlingBlocks – Gutenberg Blocks by FunnelKit Formerly WooFunnels Type Plugin Vulnerable versions = 1.4.1 Fixed in 1.5.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-38684 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5f158ad570d...

WordPress Funnel Builder for WordPress by FunnelKit plugin <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by wesley wcraft in WordPress Plugin Funnel Builder by FunnelKit versions = 3.3.1...

WordPress Funnel Builder for WordPress by FunnelKit Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)

Software Funnel Builder for WordPress by FunnelKit Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.4.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5192 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 870779297d34 Credit...

WordPress plugin Funnel Builder for WordPress by FunnelKit security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability i...

PT-2024-35051 · Funnelkit · The Funnel Builder For Wordpress By Funnelkit

Name of the Vulnerable Software and Affected Versions: The Funnel Builder for WordPress by FunnelKit plugin for WordPress versions up to, and including, 3.3.1 Description: The issue is related to Stored Cross-Site Scripting via the mimes parameter due to insufficient input sanitization and output...

CVE-2023-51671

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51671

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51670

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51670

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51670 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51670 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Arbitrary Plugin Activation vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

CVE-2023-51671 WordPress FunnelKit Checkout plugin <= 3.10.3 - Authenticated Plugin Settings Change vulnerability

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...

WordPress plugin FunnelKit Checkout security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin FunnelKit Checkout security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-51672

Missing Authorization vulnerability in FunnelKit FunnelKit Checkout.This issue affects FunnelKit Checkout: from n/a through 3.10.3...