Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One, CVE-2025-10567
- CVE, Research URL
- Published on
- Nov 05, 2025
- Research Description
- The FunnelKit WordPress plugin before 3.12.0.1 does not sanitize user input before echoing it back in some of its checkout-related AJAX actions, allowing attackers to conduct reflected XSS attacks against logged-in users.
- Affected versions
-
max 3.12.0.1.
- Status
-
vulnerable