Description
Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WPFunnels | WPFunnels | ≤ 3.13.1 | — |
Medium · 6.5
CVE-2026-97269
EUVD-2026-90836GHSA-h8hq-r6h2-qpc4
WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability
Published Oct 1, 2026 · Updated Oct 1, 2026 · Assigned by Patchstack