WPFunnels
Vulnerability activity for WPFunnels: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 9
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 9
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 9.9CriticalOct 10, 2026WPFunnels Creator LMS Path traversal / file handlingCVE-2026-62129Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions.
- 6.5MediumOct 1, 2026WPFunnels Auth bypass / access controlCVE-2026-97269Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
- 7.1HighSep 30, 2026WPFunnels XSSCVE-2026-97271Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
- 7.5HighSep 30, 2026WPFunnels Creator LMS Path traversal / file handlingCVE-2026-97244Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
- 5.4MediumSep 30, 2026WPFunnels Creator LMSCVE-2026-62083Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.
- 7.1HighSep 30, 2026WPFunnels XSSCVE-2026-27371Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.
- 6.5MediumSep 3, 2026WPFunnels Mail Mint Auth bypass / access controlCVE-2026-84755Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions.
- 6.5MediumSep 3, 2026WPFunnels Auth bypass / access controlCVE-2026-84754Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.
- 9.8CriticalSep 3, 2026WPFunnels Mail Mint DeserializationCVE-2026-84753Unauthenticated PHP Object Injection in Mail Mint <= 1.31.0 versions.
Top products
- WPFunnels4 CVEs in the last year
- Creator LMS3 CVEs in the last year, 1 critical
- Mail Mint2 CVEs in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.