teamfunnelkit vulnerabilities
4 published CVEs name teamfunnelkit among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-109991
FunnelKit Payment Gateway for Stripe WooCommerce <= 1.15.0.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via 'order-pay' URL Path Parameter
teamfunnelkit · FunnelKit Payment Gateway for Stripe WooCommerce
High7.5 - CVE-2026-119163
FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
teamfunnelkit · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
High7.5 - CVE-2026-107746
FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter
teamfunnelkit · FunnelKit – Funnel Builder Plugin for WooCommerce Checkout
High7.5 - CVE-2026-100147
FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing)
teamfunnelkit · FunnelKit – Funnel Builder for WooCommerce Checkout
High7.2