Known vulnerabilities in the Funnel Builder plugin
8 security advisories have been published for the Funnel Builder plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Funnel Builder - SQL Injection (CVE-2025-14169) HIGH
- Funnel Builder - Cross-Site Scripting (XSS) (CVE-2025-12878) MEDIUM
- Funnel Builder - Privilege Escalation (CVE-2025-7654) HIGH
- Funnel Builder - SQL Injection (CVE-2025-2203) MEDIUM
- Funnel Builder - Cross-Site Scripting (XSS) (CVE-2024-1056) MEDIUM
- Funnel Builder - Broken Access Control (CVE-2024-6836) MEDIUM
- Funnel Builder - Cross-Site Scripting (XSS) (CVE-2024-5192) MEDIUM
- Funnel Builder - SQL Injection (CVE-2023-50856) HIGH