Skip to content
OpenAdvisories

Vendor

WPFunnels

20 known vulnerabilities.

Products

WPFunnels 8 Mail Mint 6 Creator LMS 5 WPFunnels Pro 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-97269

    WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.

    WPFunnels WPFunnels
  • Medium 5.4
    CVE-2026-62083

    WordPress Creator LMS plugin <= 1.2.19 - Other vulnerability Type vulnerability

    Subscriber Other Vulnerability Type in Creator LMS <= 1.2.19 versions.

    WPFunnels Creator LMS
  • Medium 6.5
    CVE-2026-84754

    WordPress WPFunnels plugin <= 3.12.13 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.

    WPFunnels WPFunnels
  • Medium 6.5
    CVE-2026-84755

    WordPress Mail Mint plugin <= 1.31.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Mail Mint <= 1.31.0 versions.

    WPFunnels Mail Mint
  • Medium 5.3
    CVE-2025-69359

    WordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through <= 1.1.12.

    WPFunnels Creator LMS
  • Medium 5.3
    CVE-2025-67571

    WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through <= 3.6.2.

    WPFunnels WPFunnels
  • Medium 6.5
    CVE-2025-54696

    WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through <= 3.5.26.

    WPFunnels WPFunnels
  • Medium 5.9
    CVE-2024-27965

    WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnels wpfunnels.This issue affects WPFunnels: from n/a through <= 3.0.6.

    WPFunnels WPFunnels