Pricing
Case studies
Login
Start trial
Funnelforms Free
Funnelforms
Developer
5.0.2
Latest version
1,000
Installations
No date
Last updated
WordPress Plugin
No VDP
See changelog
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
0 present
12 patched
4 Mitigation rules
WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion vulnerability
<= 3.7.3.2
02/02/2026
Cross Site Scripting (XSS) vulnerability
<= 3.8.3
31/12/2025
Broken Access Control vulnerability
<= 3.8.3
25/12/2025
Authenticated (Contributor+) PHP Object Injection vulnerability
<= 3.8.3
03/12/2024
Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability
<= 3.7.3.2
28/08/2024
Authenticated (Administrator+) Arbitrary File Deletion vulnerability
<= 3.7.3.2
28/08/2024
Authenticated (Administrator+) Arbitrary File Upload vulnerability
<= 3.7.3.2
28/08/2024
Cross-Site Request Forgery to Arbitrary Post Duplication vulnerability
<= 3.4
02/11/2023
Cross-Site Request Forgery to Arbitrary Post Deletion vulnerability
<= 3.4
02/11/2023
Multiple Missing Authorization vulnerability
<= 3.4
02/11/2023
Unauthenticated Stored Cross-Site Scripting vulnerability
< 3.4
19/09/2023
WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin < 3.3.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
< 3.3.8.5
18/07/2023