FunnelKit — Vulnerabilities & Security Advisories 13

FunnelKit is a WordPress plugin designed for sales funnel and checkout optimization. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS), privilege escalation, and authentication bypass flaws. The plugin's eight recorded CVEs highlight consistent security issues, particularly in its file handling and access control mechanisms. While no major public incidents have been widely documented, the pattern of vulnerabilities suggests potential for significant compromise if exploited. Regular updates and careful implementation are advised due to the plugin's history of security weaknesses that could allow attackers to execute unauthorized commands or gain elevated access to affected WordPress installations.