Getwpfunnels vulnerabilities

Products

• Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell 8
• Mail Mint – Email Marketing, Newsletter, Email Automation & Woocommerce Emails 7
• Wpfunnels 2

Newest

• getwpfunnels mail mint – email marketing, automation & woocommerce emails with ai assistance Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter CVE-2026-111106 6.5 MediumOctober 16, 2026
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action CVE-2026-84908 5.3 MediumSeptember 9, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.31.0 - Authenticated (Custom+) SQL Injection via 'status' Parameter CVE-2026-19800 4.9 MediumSeptember 9, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields CVE-2026-10196 Public exploit 9.8 CriticalSeptember 5, 2026
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter CVE-2026-15103 8.8 HighJuly 16, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recipients' Parameter CVE-2026-12918 4.9 MediumJuly 10, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.24.2 - Authenticated (Administrator+) SQL Injection via 'contact_ids' Parameter CVE-2026-14342 4.9 MediumJuly 9, 2026
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter CVE-2026-13080 6.6 MediumJuly 9, 2026
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter CVE-2026-14345 9.8 CriticalJuly 7, 2026
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode CVE-2026-0626 6.4 MediumApril 4, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.19.2 - Authenticated (Administrator+) SQL Injection via Multiple API Endpoints CVE-2026-1258 4.9 MediumFebruary 14, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.19.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2026-1447 5.4 MediumFebruary 3, 2026
• getwpfunnels creator lms – online courses and elearning plugin Creator LMS – The LMS for Creators, Coaches, and Trainers <= 1.1.12 - Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update CVE-2025-15347 8.8 HighJanuary 20, 2026
• getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emails Mail Mint <= 1.18.10 - Authenticated (Admin+) Arbitrary File Upload CVE-2025-11967 7.2 HighNovember 8, 2025
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal CVE-2025-12000 6.5 MediumNovember 8, 2025
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell WPFunnels <= 3.6.2 - Unauthorized User Registration CVE-2025-12353 5.3 MediumNovember 8, 2025
• getwpfunnels wpfunnels – funnel builder for woocommerce with checkout & one click upsell Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting CVE-2024-10792 6.1 MediumNovember 21, 2024
• getwpfunnels wpfunnels WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-27965 5.9 MediumMarch 21, 2024
• getwpfunnels wpfunnels, wpfunnels team drag & drop sales funnel builder for wordpress – wpfunnels +1 more WordPress WPFunnels Plugin <= 2.7.16 is vulnerable to Cross Site Scripting (XSS) CVE-2023-37977 7.1 HighJuly 27, 2023
• unknown drag & drop sales funnel builder for wordpress, getwpfunnels drag \& drop sales funnel builder +1 more WPFunnels < 2.6.9 - Contributor+ Stored XSS CVE-2023-0173 5.4 MediumFebruary 6, 2023