Lucene search
+L

290 matches found

attackerkb
attackerkb
•added 2026/07/13 8:41 a.m.•12 views

CVE-2026-57816

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.15.0.8...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/13 8:41 a.m.•45 views

CVE-2026-57816 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.15.0.8...

7.1CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/13 8:41 a.m.•30 views

CVE-2026-57816

The CVE-2026-57816 entry concerns FunnelKit Funnel Builder (WordPress plugin) with a Reflected XSS in the funnel-builder component. Affected versions are listed as from n/a through

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/13 12:00 a.m.•3 views

CVE-2026-57816: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FunnelKit Funnel Builder by FunnelKit funnel-builder allows Reflected XSS.This issue affects Funnel Builder by FunnelKit: from n/a through = 3.15.0.8...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/07/10 6:59 a.m.•19 views

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin Funnel Builder by FunnelKit versions = 3.15.0.8...

7.1CVSS6.1AI score0.00251EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/06/26 3:16 p.m.•22 views

CVE-2026-57635

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/26 2:53 p.m.•14 views

EUVD-2026-39751

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/26 2:53 p.m.•11 views

CVE-2026-57635

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/26 2:53 p.m.•13 views

CVE-2026-57635 WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/26 2:53 p.m.•52 views

CVE-2026-57635 WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/26 2:53 p.m.•32 views

CVE-2026-57635

CVE-2026-57635 describes an unauthenticated Cross Site Request Forgery (CSRF) vulnerability in the WordPress plugin FunnelKit Payment Gateway for Stripe WooCommerce , affecting versions up to and including 1.14.0.3 . The public records indicate the issue is a CSRF flaw, with no explicit exploit d...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/06/26 12:32 p.m.•19 views

WordPress FunnelKit Payment Gateway for Stripe WooCommerce plugin <= 1.14.0.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by ParkHyunWoo in WordPress Plugin FunnelKit Payment Gateway for Stripe WooCommerce versions = 1.14.0.3...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/26 12:00 a.m.•17 views

PT-2026-52806

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS5.8AI score0.00167EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/26 12:00 a.m.•3 views

CVE-2026-57635: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in FunnelKit Payment Gateway for Stripe WooCommerce = 1.14.0.3 versions...

6.5CVSS5.7AI score0.00167EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/24 8:16 a.m.•30 views

CVE-2026-56052

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5...

7.6CVSS0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/24 7:23 a.m.•49 views

CVE-2026-56052 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5...

7.6CVSS0.00383EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/24 7:23 a.m.•10 views

CVE-2026-56052

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5...

7.6CVSS5.9AI score0.00383EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/24 7:23 a.m.•21 views

EUVD-2026-38713

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5...

7.6CVSS5.9AI score0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/24 7:23 a.m.•11 views

CVE-2026-56052 WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection. This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/24 7:23 a.m.•38 views

CVE-2026-56052

CVE-2026-56052 is a SQL Injection vulnerability in WordPress Funnel Builder by FunnelKit up to version 3.15.0.5. The root cause is improper neutralization of certain elements in SQL commands, enabling blind SQL injection. Affected product: Funnel Builder by FunnelKit (WordPress plugin). CVSS 3.1 ...

7.6CVSS5.8AI score0.00383EPSS
SaveExploits0References1
Rows per page
Query Builder