Skip to content
OpenAdvisories

Vendor

Funnelforms

18 known vulnerabilities.

Products

Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free 15 Funnelforms Free 2 FunnelFormsPro 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-39440 Public exploit

    WordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1.

    Funnelforms FunnelFormsPro