WPFunnels

4 known vulnerabilities in WPFunnels, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-97269 CVSS 6.5 medium Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
  • CVE-2026-97271 CVSS 7.1 high Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
  • CVE-2026-27371 CVSS 7.1 high Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
  • CVE-2026-84754 CVSS 6.5 medium Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.