Funnel Builder
1 CVEs
product
Monthly
The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
SQLi
Funnel Builder
PHP
NVD
WPScan
CVSS 3.1
6.1
EPSS
0.2%
EPSS 0%
CVSS 6.1
MEDIUM
POC
This Month
The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
SQLi
Funnel Builder
+1
NVD
WPScan