Extension WordPress

Vulnérabilités SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

Cette page rassemble les failles publiées pour SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels), leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

3 fiches

CVE-2025-8607 Moyenne · 6,4
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block's attributes in all versions up to, and including, 1.6.0 due to insufficient input sanitization and…

Versions affectées

*-1.6.0

Correctif

1.7.0

Publication

20/08/2025

CVE-2024-13675 Moyenne · 6,4
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Icon List" Block in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output…

Versions affectées

*-1.5.0

Correctif

1.6.0

Publication

07/03/2025

CVE-2024-38684 Moyenne · 6,4
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting

The SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-1.4.1

Correctif

1.5.0

Publication

10/07/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités