WPFunnels Team vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WPFunnels Team products: 3 record(s), with severity, exploitation and fixes.

WPFunnels 1 Mail Mint 1 WP VR 1

Exploited only (KEV) →

CVE-2026-62029 Medium · 6.5 CWE-79 Oct 9, 2026

WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through 3.13.3.

CVE-2026-104386 Medium · 6.5 CWE-862 Oct 5, 2026

WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3.

CVE-2026-27349 Medium · 4.3 CWE-497 May 21, 2026

WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5.