CVE-2026-27371

Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

• Published Sep 30, 2026
• CVSS 7.1 high
• 0.2% chance of exploitation in the next 30 days (EPSS)

CVE-2026-27371 at the National Vulnerability Database