Vulnerabilities

TI-2026-41311 CVE-2026-57374 · GHSA-7w9g-8ww7-6pcg

WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-23 No fix listed CWE-79

TI-2026-41310 CVE-2026-57373 · GHSA-x9p9-vmvc-5jr4

WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability

LOW 28

Customer Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-07-23 No fix listed CWE-79

TI-2023-02604 CVE-2023-2781 · GHSA-2h84-2j8q-rcf8

User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass

MEDIUM 45

The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01172 Published 2023-06-02 No fix listed CWE-288

TI-2018-14969 CVE-2018-21007 · GHSA-3jc7-fxmm-792m

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct…

MEDIUM 46

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01952 Published 2019-08-29 No fix listed CWE-284

Vulnerabilities

Filters

WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.7 - Cross Site Scripting (XSS) vulnerability

WordPress Funnel Kit Funnel Builder PRO plugin <= 3.15.0.4 - Cross Site Scripting (XSS) vulnerability

User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass

The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct…