What’s Vulnerable › Products

WPFunnels vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your WPFunnels version is affected

Latest WPFunnels vulnerabilities

• CVE-2026-79632 — WPFunnels < 3.13.0 - Unauthenticated Arbitrary Recipient Email Sending via wpfnl_shortcode_optin_submission (CVSS 5.3)
• CVE-2026-79631 — WPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log Files (CVSS 5.3)
• CVE-2026-79630 — WPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution (CVSS 5.3)
• CVE-2025-15691 — WPFunnels < 3.13.0 - Unauthenticated User Registration via Opt-in Forms (CVSS 5.3)