Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

WordPress Funnelforms Free Plugin <= 3.4 is vulnerable to Broken Access Control

🗓️ 02 Nov 2023 00:00:00Reported by WordFenceType 
patchstack
 patchstack🔗 patchstack.com👁 7 Views

WordPress Funnelforms Free Plugin <= 3.4 Broken Access Contro

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2023-5385
20 Dec 202313:48
–circl
CNNVD		WordPress Plugin Funnelforms Free Security Vulnerability
22 Nov 202300:00
–cnnvd
CVE		CVE-2023-5385
22 Nov 202315:33
–cve
Cvelist		CVE-2023-5385 Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
22 Nov 202315:33
–cvelist
EUVD		EUVD-2023-57700
3 Oct 202520:07
–euvd
NVD		CVE-2023-5385
22 Nov 202316:15
–nvd
Prion		Design/Logic Flaw
22 Nov 202316:15
–prion
Positive Technologies		PT-2023-32083 · WordPress · Funnelforms Free
22 Nov 202300:00
–ptsecurity
RedhatCVE		CVE-2023-5385
23 May 202504:31
–redhatcve
Wordfence Blog		Wordfence Intelligence Weekly WordPress Vulnerability Report (October 30, 2023 to November 5, 2023)
9 Nov 202318:38
–wordfence
Rows per page
Vulners
Node
funnelformsfunnelforms_freeRange≤3.4
SourceLink
wordpresswww.wordpress.org/plugins/funnelforms-free/
cvewww.cve.org/CVERecord
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-arbitrary-post-deletion
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-enabledisable-dark-mode
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-new-category-creation
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-test-email-sending
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-category-update
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-post-modification
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-category-deletion
wordfencewww.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/funnelforms-free/funnelforms-free-34-missing-authorization-to-arbitrary-post-duplication
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
02 Nov 2023 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 3.14.3
EPSS0.00111
wordpress funnelforms freepluginvulnerablebroken access controlowasp a5cve-2023-5385low severity
7