Skip to content

Wpfunnels vulnerabilities

Products

Newest

wpfunnels WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-27062 4.3 MediumOctober 29, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability CVE-2026-118088 5.3 MediumOctober 29, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability CVE-2026-118091 5.3 MediumOctober 29, 2026
wpfunnels creator lms WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability CVE-2026-62129 9.9 CriticalOctober 10, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-62029 6.5 MediumOctober 9, 2026
creator lms lms, wpfunnels creator lms +1 more WordPress Creator LMS plugin <= 1.2.21 - Broken Access Control vulnerability CVE-2026-62128 5.3 MediumOctober 8, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97269 6.5 MediumOctober 1, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-97271 7.1 HighSeptember 30, 2026
wpfunnels creator lms WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability CVE-2026-97244 7.5 HighSeptember 30, 2026
wpfunnels creator lms WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability CVE-2026-62083 5.4 MediumSeptember 30, 2026
wpfunnels WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27371 7.1 HighSeptember 30, 2026
unknown wpfunnels WPFunnels < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission CVE-2026-79632 5.3 MediumSeptember 4, 2026
unknown wpfunnels WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files CVE-2026-79631 5.3 MediumSeptember 4, 2026
unknown wpfunnels WPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution CVE-2026-79630 5.3 MediumSeptember 4, 2026
unknown wpfunnels WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms CVE-2025-15691 5.3 MediumSeptember 4, 2026
unknown mail mint WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability CVE-2026-84755 6.5 MediumSeptember 3, 2026
wpfunnels WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability CVE-2026-84754 6.5 MediumSeptember 3, 2026
unknown mail mint WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability CVE-2026-84753 Public exploit 9.8 CriticalSeptember 3, 2026
wpfunnels pro WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-49778 7.1 HighJune 17, 2026
wpfunnels creator lms WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability CVE-2026-32530 8.8 HighMarch 25, 2026
unknown mail mint WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability CVE-2026-23541 7.5 HighFebruary 19, 2026
wpfunnels creator lms WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability CVE-2025-69359 5.3 MediumJanuary 6, 2026
wpfunnels WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability CVE-2025-67571 5.3 MediumDecember 9, 2025
unknown mail mint WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability CVE-2025-59570 7.6 HighSeptember 22, 2025
unknown mail mint WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability CVE-2025-58604 7.6 HighSeptember 3, 2025
wpfunnels WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability CVE-2025-54696 6.5 MediumAugust 14, 2025
wpfunnels WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability CVE-2025-47530 9.8 CriticalMay 23, 2025
unknown mail mint WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability CVE-2025-47541 7.5 HighMay 23, 2025
getwpfunnels wpfunnels WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-27965 5.9 MediumMarch 21, 2024