Archivo de vulnerabilidades

Conoce las vulnerabilidades. Protege tus aplicaciones.

Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.

Plataforma

Gravedad

Publicada desde

Publicada hasta

Archivo de vulnerabilidades 23

Restablecer filtros

Alta 09.10.2026

CVE-2026-100147

FunnelKit <= 3.16.0.5 - Cross-Site Scripting almacenado no autenticado mediante campos de pedido (shipping/billing)

El plugin FunnelKit para WordPress es vulnerable a Cross-Site Scripting almacenado no autenticado mediante campos de pedido. Los atacantes pueden inyectar scripts que se ejecutan cuando los usuarios acceden a las páginas afectadas.

Alta 10.07.2026

CVE-2026-57816

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.8 - Unauthenticated Stored Cross-Site Scripting

Media 07.07.2026

CVE-2026-57373

FunnelKit Funnel Builder Pro <= 3.15.0.4 - Authenticated (Customer+) Stored Cross-Site Scripting

Alta 07.07.2026

CVE-2026-57374

FunnelKit Funnel Builder Pro <= 3.15.0.7 - Unauthenticated Stored Cross-Site Scripting

Media 25.06.2026

CVE-2026-12978

FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting

Media 25.06.2026

CVE-2026-12979

FunnelKit <= 3.15.0.5 - Authenticated (Admin+) Arbitrary File Deletion

Media 24.06.2026

CVE-2026-56052

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.5 - Authenticated (Administrator+) SQL Injection

Alta 03.06.2026

CVE-2026-48966

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Unauthenticated Stored Cross-Site Scripting

Media 19.05.2026

CVE-2026-47100

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization

Alta 27.04.2026

CVE-2026-42381

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.1 - Unauthenticated SQL Injection

Alta 11.12.2025

CVE-2025-14169

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection

Media 06.12.2025

CVE-2025-66067

Funnel Builder by FunnelKit <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Media 18.11.2025

CVE-2025-12878

FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode

Media 15.10.2025

CVE-2025-10567

FunnelKit <= 3.12.0 - Reflected Cross-Site Scripting

Alta 19.08.2025

CVE-2025-54750

Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion

Alta 18.08.2025

CVE-2025-7654

Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library

Media 08.07.2025

CVE-2025-49034

Funnel Builder by FunnelKit <= 3.10.2 - Authenticated (Administrator+) SQL Injection

Media 07.04.2025

CVE-2025-2203

Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection

Crítica 23.02.2025

CVE-2025-26979

Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion

Media 28.08.2024

CVE-2024-1056

Funnel Kit Funnel Builder PRO <= 3.4.5 Authenticated(Contributor+) Stored Cross-Site Scripting via allow_iframe_tag_in_post

Media 23.07.2024

CVE-2024-6836

Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update

Media 28.06.2024

CVE-2024-5192

Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload

Media 21.12.2023

CVE-2023-50856

Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection

Identifica las vulnerabilidades de tu aplicación

Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.

Conectar tu aplicación

Conoce las vulnerabilidades. Protege tus aplicaciones.

Archivo de vulnerabilidades 23

Identifica las vulnerabilidades de tu aplicación

La seguridad de tus aplicaciones en tu correo