WPFunnels vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20256
3. 202613

Newest CVEs

• CVE-2026-62129

  WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability

  WPFunnels · Creator LMS

  Critical9.9
• CVE-2026-97269

  WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability

  WPFunnels · WPFunnels

  Medium6.5
• CVE-2026-97271

  WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

  WPFunnels · WPFunnels

  High7.1
• CVE-2026-97244

  WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability

  WPFunnels · Creator LMS

  High7.5
• CVE-2026-62083

  WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability

  WPFunnels · Creator LMS

  Medium5.4
• CVE-2026-27371

  WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

  WPFunnels · WPFunnels

  High7.1
• CVE-2026-84755

  WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability

  WPFunnels · Mail Mint

  Medium6.5
• CVE-2026-84754

  WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability

  WPFunnels · WPFunnels

  Medium6.5
• CVE-2026-84753

  WordPress Mail Mint plugin <= 1.31.0 - PHP Object Injection vulnerability

  WPFunnels · Mail Mint

  Critical9.8
• CVE-2026-49778

  WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability

  WPFunnels · WPFunnels Pro

  High7.1