CVE-2026-100147 | teamfunnelkit FunnelKit Plugin up to 3.16.0.5 on WordPress shipping_first_name cross site scripting

October 10, 2026 Yanac

A vulnerability described as problematic has been identified in teamfunnelkit FunnelKit Plugin up to 3.16.0.5 on WordPress. Affected is an unknown function. Such manipulation of the argument shipping_first_name leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-100147. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More