İçeriğe atla
Noroxi

WPFunnels

wpfunnels · eklenti

WPFunnels için bilinen güvenlik açıkları. Sitenizde bu bileşenin hangi sürümünün çalıştığını WP Lens ile saniyede öğrenin.

17 bilinen açık

2 kritik · son kayıt 1 Eki 2026

Güvenlik açıkları

  • CVE-2026-14345

    WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter

    Kritik 9.8

  • CVE-2025-47530

    WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability

    Kritik 9.8

  • CVE-2026-15103

    WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter

    Yüksek 8.8

  • CVE-2026-97271

    WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2026-27371

    WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Yüksek 7.1

  • CVE-2026-13080

    WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter

    Orta 6.6

  • CVE-2026-97269

    WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability

    Orta 6.5

  • CVE-2026-84754

    WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability

    Orta 6.5

  • CVE-2025-12000

    WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal

    Orta 6.5

  • CVE-2025-54696

    WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability

    Orta 6.5

  • CVE-2026-0626

    WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode

    Orta 6.4

  • CVE-2024-10792

    Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting

    Orta 6.1

  • CVE-2023-37977

    WordPress WPFunnels Plugin <= 2.7.16 is vulnerable to Cross Site Scripting (XSS)

    Orta 6.1

  • CVE-2026-84908

    WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action

    Orta 5.3

  • CVE-2025-67571

    WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability

    Orta 5.3

  • CVE-2025-12353

    WPFunnels <= 3.6.2 - Unauthorized User Registration

    Orta 5.3

  • CVE-2024-27965

    WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

    Orta 4.8

← Dizine dön