sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total22
Critical2
High4
Medium16
Reset
Showing 1-20 of 22 records
Threat Entry Updated 2026-09-09

Wpfunnels - Broken Access Control (CVE-2026-84908)

The WPFunnels plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.12.13. This is due to the plugin registering the 'wpfnl_load_payment' AJAX action for both authenticated and unauthenticated (wp_ajax_nopriv_) users and the underlying add_offer_product_to_cart() function performing no nonce verification, no capability check, and no validation that the attacker-supplied product_id is the offer product actually configured on the attacker-supplied step_id. This makes it possible for unauthenticated attackers to add arbitrary WooCommerce products to a cart at any discounted price configured on any funnel step, enabling price…

PLUGIN Wpfunnels

CVE-2026-84908

MEDIUM CVSS 5.3 2026-09-09
Open Full Technical Breakdown
Threat Entry Updated 2026-09-08

WPFunnels - Cross-Site Request Forgery (CSRF) (CVE-2026-79632)

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an arbitrary subject.

PLUGIN WPFunnels

CVE-2026-79632

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-08

WPFunnels - Security Vulnerability (CVE-2026-79631)

The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled.

PLUGIN WPFunnels

CVE-2026-79631

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-08

WPFunnels - Security Vulnerability (CVE-2026-79630)

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduced price carried through to the total of the order they place.

PLUGIN WPFunnels

CVE-2026-79630

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-09-08

WPFunnels - Security Vulnerability (CVE-2025-15691)

The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when registration is disabled. This is an incomplete fix for CVE-2025-12353: the check added in 3.6.3 covers only one of the three registration paths.

PLUGIN WPFunnels

CVE-2025-15691

MEDIUM CVSS 5.3 2026-09-04
Open Full Technical Breakdown
Threat Entry Updated 2026-07-16

Wpfunnels - Privilege Escalation (CVE-2026-15103)

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Privilege Escalation via arbitrary option update in all versions up to, and including, 3.12.8. This is due to the `update_settings()` REST callback failing to validate the `group_id` path parameter against an allowlist of permitted option names before passing it directly to `get_option()` and `update_option()`, allowing the built-in `wp_user_roles` option — which satisfies the route's loose `[\w-]+` regex — to be targeted. This makes it possible for authenticated attackers with the `wpf_manage_funnels`…

PLUGIN Wpfunnels

CVE-2026-15103

HIGH CVSS 8.8 2026-07-16
Open Full Technical Breakdown
Threat Entry Updated 2026-07-09

Wpfunnels - Path Traversal (CVE-2026-13080)

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.12.7 via the 'logKey' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be…

PLUGIN Wpfunnels

CVE-2026-13080

MEDIUM CVSS 6.6 2026-07-09
Open Full Technical Breakdown
Threat Entry Updated 2026-07-08

Wpfunnels - Remote Code Execution (CVE-2026-14345)

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of attacker-controlled postData values into a PHP-includeable .log file combined with the use of include_once to render that file in wpfnl_show_log. This makes it possible for unauthenticated attackers to execute code on the server. Exploitation requires that the Log Settings "Enable Logs" toggle is on and that an administrator…

PLUGIN Wpfunnels

CVE-2026-14345

CRITICAL CVSS 9.8 2026-07-07
Open Full Technical Breakdown
Threat Entry Updated 2026-07-24

WPFunnels - Cross-Site Scripting (XSS) (CVE-2026-0626)

The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpf_optin_form' shortcode in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping of the 'button_icon' parameter. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN WPFunnels

CVE-2026-0626

MEDIUM CVSS 6.4 2026-04-04
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Wpfunnels - Security Vulnerability (CVE-2025-12353)

The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 3.6.2. This is due to the plugin relying on a user controlled value 'optin_allow_registration' to determine if user registration is allowed, instead of the site-specific setting. This makes it possible for unauthenticated attackers to register new user accounts, even when user registration is disabled.

PLUGIN Wpfunnels

CVE-2025-12353

MEDIUM CVSS 5.3 2025-11-08
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Wpfunnels - Remote Code Execution (CVE-2025-12000)

The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpfnl_delete_log() function in all versions up to, and including, 3.6.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

PLUGIN Wpfunnels

CVE-2025-12000

MEDIUM CVSS 6.5 2025-11-08
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Wpfunnels - Cross-Site Scripting (XSS) (CVE-2024-10792)

The Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post_id' parameter in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This was partially patched in 3.5.4 and fully patched in 3.5.5.

PLUGIN Wpfunnels

CVE-2024-10792

MEDIUM CVSS 6.1 2024-11-21
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.