CVE Intelligence

WPFunnels WPFunnels vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting WPFunnels WPFunnels: 5 record(s), with affected versions and fixes.

CVE-2026-97269 Medium · 6.5 CWE-639 Oct 1, 2026
WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
CVE-2026-97271 High · 7.1 CWE-79 Sep 30, 2026
WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
CVE-2026-27371 High · 7.1 CWE-79 Sep 30, 2026
WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
CVE-2026-84754 Medium · 6.5 CWE-862 Sep 3, 2026
WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.
CVE-2025-67571 Medium · 5.3 CWE-862 Dec 9, 2025
WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through <= 3.6.2.