Wisetr INC. CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Wisetr INC. CVE published 2026-07-23

CVE-2026-57374

CVE-2026-57374 is an Unauthenticated Cross Site Scripting (XSS) vulnerability in Funnel Kit Funnel Builder PRO versions <= 3.15.0.7. This high-severity vulnerability allows unauthenticated attackers to inject malicious scripts, potentially leading to unauthorized script execution and compromising user sessions or data theft. Defenders responsible for Funnel Kit Funnel Builder PRO installations should asse [truncated]

MEDIUM Wisetr INC. CVE published 2026-07-23

CVE-2026-57373

A Cross Site Scripting (XSS) vulnerability exists in Funnel Kit Funnel Builder PRO versions up to 3.15.0.4. This CVE was published on 2026-07-23T12:18:28.190Z and last modified on 2026-10-24T13:10:00.147Z.