CVE-2026-57374

Unauthenticated Cross Site Scripting (XSS) in Funnel Kit Funnel Builder PRO <= 3.15.0.7 versions.

Credits

dutafi | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/funnel-builder-pro/vulnerability/wordpress-funnel-kit-funnel-builder-pro-plugin-3-15-0-7-cross-site-scripting-xss-vulnerability?_s_id=cve