Medium
CVE-2026-62029
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
Medium
CVE-2026-97269
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference
High
CVE-2026-97271
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-27371
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-84908
WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action
Medium
CVE-2026-79632
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization
Medium
CVE-2026-79631
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Information Exposure
Medium
CVE-2025-15691
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization
Medium
CVE-2026-84754
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.12.13 - Missing Authorization
Medium
CVE-2026-79630
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Product Price Manipulation
High
CVE-2026-15103
WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter
Medium
CVE-2026-13080
WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter
Critical
CVE-2026-14345
WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter
High
CVE-2026-49778
WPFunnels Pro <= 2.9.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-0626
WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode
Medium
CVE-2025-67571
WPFunnels <= 3.6.2 - Missing Authorization
Medium
CVE-2025-12000
WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal
Medium
CVE-2025-12353
WPFunnels <= 3.6.2 - Unauthorized User Registration
Medium
CVE-2025-54696
WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-47530
WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection
Medium
CVE-2024-10792
Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-27965
WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-37977
WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting
Medium
50b26952-bf59-4236-93b4-6b4928609c15
WPFunnels <= 2.7.15 - Insecure Direct Object Reference
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.