Skip to content
OpenAdvisories

Vendor

WPFunnels

20 known vulnerabilities.

Products

WPFunnels 8 Mail Mint 6 Creator LMS 5 WPFunnels Pro 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2026-97271

    WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

    WPFunnels WPFunnels
  • High 7.5
    CVE-2026-97244

    WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability

    Contributor Path Traversal in Creator LMS <= 1.2.19 versions.

    WPFunnels Creator LMS
  • High 7.1
    CVE-2026-27371

    WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions.

    WPFunnels WPFunnels
  • High 7.1
    CVE-2026-49778

    WordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in WPFunnels Pro <= 2.9.4 versions.

    WPFunnels WPFunnels Pro
  • High 8.8
    CVE-2026-32530

    WordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through <= 1.1.18.

    WPFunnels Creator LMS
  • High 7.5
    CVE-2026-23541

    WordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.

    WPFunnels Mail Mint
  • High 7.6
    CVE-2025-59570

    WordPress Mail Mint Plugin <= 1.18.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.6.

    WPFunnels Mail Mint
  • High 7.6
    CVE-2025-58604

    WordPress Mail Mint Plugin <= 1.18.5 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.5.

    WPFunnels Mail Mint
  • High 7.5
    CVE-2025-47541

    WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through <= 1.17.7.

    WPFunnels Mail Mint