Approved changes feed: RSS · Atom

cpe:2.3:a:wpfunnels:wpfunnels:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWpfunnels (13010a15-1a8d-5895-8418-f6b400914a7b)
ProductWpfunnels (f4986e16-0fb7-5320-918d-3a84888af498)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67571 vulnerable 2026-06-08 07:41:20.015548 WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through <= 3.6.2.
Published: 2025-12-09T14:14:12.900Z
Updated: 2026-04-28T19:23:49.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54696 vulnerable 2026-06-08 07:33:13.079965 WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through <= 3.5.26.
Published: 2025-08-14T10:34:53.631Z
Updated: 2026-04-28T16:13:34.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47530 vulnerable 2026-06-08 07:27:14.513383 WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability
CRITICAL (9.8)
Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through <= 3.5.18.
Published: 2025-05-23T12:43:32.783Z
Updated: 2026-04-28T16:12:44.125Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27965 vulnerable 2026-06-08 06:33:25.173617 WordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels WPFunnels wpfunnels.This issue affects WPFunnels: from n/a through <= 3.0.6.
Published: 2024-03-21T16:38:15.646Z
Updated: 2026-04-28T16:09:14.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.