What’s Vulnerable › Products
Funnelforms Free vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Funnelforms Free version is affected
Latest Funnelforms Free vulnerabilities
- CVE-2025-62758 — WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-68582 — WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2024-5857 — Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion (CVSS 5.3)
- CVE-2024-7447 — Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload (CVSS 5.3)
- CVE-2024-6312 — Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion (CVSS 6.5)
- CVE-2024-6311 — Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- CVE-2023-5990 — Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRF (CVSS 6.5)