WordPress Funnel Builder by CartFlows plugin <= 1.6.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Funnel Builder by CartFlows plugin versions = 1.6.12. Solution Update the WordPress Funnel Builder by CartFlows plugin to the latest available version at least 1.6.13...

WordPress Funnel Builder by CartFlows plugin <= 1.5.15 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Funnel Builder by CartFlows plugin versions = 1.5.15. Solution Update the WordPress Funnel Builder by CartFlows plugin to the latest available version at least 1.5.16...

Funnel Builder by CartFlows < 1.3.1 - Authenticated Arbitrary Plugin Activation

Issue allowing any authenticated user to active a plugin on the blog...