Funnelforms vulnerabilities
17 published CVEs name Funnelforms among the affected products.
- 17Published CVEs17 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-62758
WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability
Funnelforms · Funnelforms Free
Medium6.5 - CVE-2025-68582
WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability
Funnelforms · Funnelforms Free
Medium5.3 - CVE-2024-10587
Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
High8.8 - CVE-2024-5857
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium5.3 - CVE-2024-7447
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium5.3 - CVE-2024-6311
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
High7.2 - CVE-2024-6312
Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium6.5 - CVE-2023-5385
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3 - CVE-2023-5383
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3 - CVE-2023-5387
Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
funnelforms · Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Medium4.3