Funnelforms vulnerabilities
17 published CVEs name Funnelforms among the affected products.
- Published CVEs
- 17
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 15Low 0Not scored 0
CVEs per yearBy the year they were published
- 202310
- 20245
- 20252
Newest CVEs
- CVE-2025-62758
WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Funnelforms · Funnelforms Free
Medium6.5 - CVE-2025-68582
WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability
Funnelforms · Funnelforms Free
Medium5.3 - CVE-2024-10587
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
High8.8 - CVE-2024-5857
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium5.3 - CVE-2024-7447
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium5.3 - CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
High7.2 - CVE-2024-6312
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium6.5 - CVE-2023-5385
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3 - CVE-2023-5383
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3 - CVE-2023-5387
Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3