[ Vendor · 6 CVEs ]
WPFunnels
CVEs affecting WPFunnels published in the last 30 days, plus any WPFunnels CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62129 | 10 Oct 2026 | CVSS 9.9 | WPFunnels Creator LMSContributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. | |
| CVE-2026-97269 | 1 Oct 2026 | CVSS 6.5 | WPFunnelsUnauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions. | |
| CVE-2026-97271 | 30 Sep 2026 | CVSS 7.1 | WPFunnelsUnauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. | |
| CVE-2026-97244 | 30 Sep 2026 | CVSS 7.5 | WPFunnels Creator LMSContributor Path Traversal in Creator LMS <= 1.2.19 versions. | |
| CVE-2026-62083 | 30 Sep 2026 | CVSS 5.4 | WPFunnels Creator LMSSubscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions. | |
| CVE-2026-27371 | 30 Sep 2026 | CVSS 7.1 | WPFunnelsUnauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |