CVE-2026-48966 — WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability

CVE-2026-48966

WordPress Funnel Builder by FunnelKit plugin <= 3.15.0.2 - Cross Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Unauthenticated Cross Site Scripting (XSS) in Funnel Builder by FunnelKit <= 3.15.0.2 versions.

Vendor / product	Versions
FunnelKit / Funnel Builder by FunnelKit	affected n/a through 3.15.0.2

CWE-79

CISA-ADP

No English description supplied.

No references supplied.