Unknown WPFunnels

4 known vulnerabilities in Unknown WPFunnels, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-79632 CVSS 5.3 medium The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers…
  • CVE-2026-79631 CVSS 5.3 medium The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the…
  • CVE-2026-79630 CVSS 5.3 medium The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that…
  • CVE-2025-15691 CVSS 5.3 medium The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from…