CVE-2026-56052: fallo de gravedad alta en FunnelKit Funnel Builder by FunnelKit
WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.5 - SQL Injection vulnerability
Publicada el
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.6epss 0.4%
probabilidad de explotación
0.4%top 70% de las CVE
explotación observada
noninguna fuente lo reporta
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder by FunnelKit allows Blind SQL Injection.
This issue affects Funnel Builder by FunnelKit: from n/a through 3.15.0.5.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Productos afectados
FunnelKit · Funnel Builder by FunnelKitCVEs relacionadas — FunnelKit Funnel Builder by FunnelKit
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-42381CRITICALWordPress Funnel Builder by FunnelKit plugin <= 3.15.0.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-57816HIGHWordPress Funnel Builder by FunnelKit plugin <= 3.15.0.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-48966HIGHWordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%