WPFunnels
WPFunnels
Developer
3.13.6
Latest version
5,000
Installations
No date
Last updated
Vulnerability history
0 present
25 patched
6 Mitigation rules
- Cross Site Request Forgery (CSRF) vulnerability<= 3.13.52 days ago
- Broken Access Control vulnerability<= 3.13.52 days ago
- Broken Access Control vulnerability<= 3.13.52 days ago
- Cross Site Scripting (XSS) vulnerability<= 3.13.509/10/2026
- Insecure Direct Object References (IDOR) vulnerability<= 3.13.101/10/2026
- Cross Site Scripting (XSS) vulnerability<= 3.13.130/09/2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 3.13.130/09/2026
- Insecure Direct Object References (IDOR) vulnerability<= 3.12.1316/09/2026
- Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation vulnerability<= 3.12.1308/09/2026
- Unauthenticated Price Manipulation vulnerability< 3.13.004/09/2026
- Unauthenticated Order and Opt-In PII Disclosure vulnerability< 3.13.004/09/2026
- Unauthenticated Arbitrary Recipient Email Sending vulnerability< 3.13.004/09/2026
- Unauthenticated User Registration vulnerability< 3.13.004/09/2026
- Broken Access Control vulnerability<= 3.12.1303/09/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode vulnerability<= 3.7.907/04/2026
- Broken Access Control vulnerability<= 3.6.215/11/2025
- Unauthorized User Registration vulnerability<= 3.6.210/11/2025
- Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal vulnerability<= 3.6.210/11/2025
- Cross Site Scripting (XSS) vulnerability<= 3.5.2630/07/2025
- PHP Object Injection Vulnerability<= 3.5.1812/05/2025
- Reflected Cross-Site Scripting vulnerability<= 3.5.521/11/2024
- Cross Site Scripting (XSS) vulnerability<= 3.0.613/03/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 2.7.1613/07/2023
- Insecure Direct Object Reference vulnerability<= 2.7.1511/07/2023
- Contributor+ Stored XSS vulnerability< 2.6.911/01/2023