Known vulnerabilities in FunnelKit – Funnel Builder for WooCommerce Checkout
Create high-converting WooCommerce checkout pages, WooCommerce thank you pages & sales funnels with the highest-rated WordPress funnel builder.
20Reported vulnerabilities
9.8Highest CVSS score
3.16.0.2Latest version
30,000+Active installs
What to do now
Update FunnelKit – Funnel Builder for WooCommerce Checkout to 3.15.0.9 or later.
20 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2025-2203 | Medium | 0.3% | Before 3.10.2 | 3.10.2 |
May 15, 2025 |
| CVE-2025-26979 | Critical | 0.8% | 3.9.0 and earlier | 3.9.1 |
February 23, 2025 |
| CVE-2025-7654 | High | 0.6% | 0 to 3.6.3 (inclusive) 0 to 3.11.0.2 (inclusive) |
3.6.4 |
August 19, 2025 |
| CVE-2025-54750 | High | 0.5% | 3.11.1 and earlier | 3.12.0 |
August 19, 2025 |
| CVE-2026-42381 | High | 0.3% | 3.15.0.1 and earlier | 3.15.0.2 |
April 27, 2026 |
| CVE-2025-14169 | High | 0.4% | 0 to 3.13.1.5 (inclusive) | 3.13.1.6 |
December 12, 2025 |
| CVE-2026-57816 | High | 0.3% | 3.15.0.8 and earlier | 3.15.0.9 |
July 10, 2026 |
| CVE-2023-50856 | High | 0.5% | 2.14.3 and earlier | 2.14.4 |
December 28, 2023 |
| CVE-2026-48966 | High | 0.2% | 3.15.0.2 and earlier | 3.15.0.3 |
June 3, 2026 |
| CVE-2026-12979 | Medium | 0.3% | 3.15.0.5 and earlier | 3.15.0.6 |
June 25, 2026 |
| CVE-2025-66067 | Medium | 0.2% | 3.13.1.2 and earlier | 3.13.1.3 |
December 6, 2025 |
| CVE-2025-12878 | Medium | 0.2% | 0 to 3.13.1.2 (inclusive) | 3.13.1.3 |
November 19, 2025 |
| CVE-2026-12978 | Medium | 0.3% | 3.15.0.5 and earlier | 3.15.0.6 |
June 25, 2026 |
| CVE-2025-10567 | Medium | 0.2% | 3.12.0 and earlier | 3.12.0.1 |
October 15, 2025 |
| CVE-2024-1056 | Medium | 0.3% | Before 3.5.0 | 3.5.0 |
August 29, 2024 |
| CVE-2024-5192 | Medium | 0.3% | Before 3.4.0 | 3.4.0 |
June 29, 2024 |
| CVE-2026-47100 | Medium | 0.5% | 3.15.0.2 and earlier | 3.15.0.3 |
May 19, 2026 |
| CVE-2026-56052 | Medium | 0.4% | 3.15.0.5 and earlier | 3.15.0.6 |
June 24, 2026 |
| CVE-2025-49034 | Medium | 0.3% | 3.10.2 and earlier | 3.11.0 |
July 8, 2025 |
| CVE-2024-6836 | Medium | 0.3% | Before 3.4.7 | 3.4.7 |
July 24, 2024 |