medium6.1
CVE-2025-2203
The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL inject…
Impact
The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Funnelkit | Funnel Builder | before 3.10.2 |