CVE-2026-32530

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

PT-2026-28044

Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through = 1.1.18...

CVE-2026-23541

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through = 1.19.4...

CVE-2026-23541

Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through = 1.19.4...

CVE-2025-69359

Missing Authorization vulnerability in WPFunnels Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: from n/a through = 1.1.12...

PT-2026-1486

Name of the Vulnerable Software and Affected Versions WPFunnels Creator LMS versions through 1.1.12 Description An authorization issue exists in WPFunnels Creator LMS. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendatio...

CVE-2025-67571

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

EUVD-2025-202075

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

CVE-2025-67571

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

CVE-2025-67571 WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

CVE-2025-67571 WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPFunnels WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through = 3.6.2...

CVE-2025-67571

CVE-2025-67571 is a Missing Authorization / Broken Access Control vulnerability affecting WordPress WPFunnels up to version 3.6.2. The issue arises from incorrectly configured access control security levels, enabling unauthorized access to certain functions. Red Hat and CVE databases corroborate ...

PT-2025-49945

Name of the Vulnerable Software and Affected Versions WPFunnels versions through 3.6.2 Description An authorization issue exists in WPFunnels wpfunnels, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WPFunnels to a version later than 3.6.2...

WordPress plugin WPFunnels 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Jitlada in WordPress Plugin WPFunnels versions = 3.6.2...

WordPress WPFunnels plugin unauthorized user registration vulnerability

WordPress WPFunnels plugin is a funnel builder designed for WordPress and WooCommerce. WordPress WPFunnels plugin suffers from an unauthorized user registration vulnerability that stems from relying on the user control value optinallowregistration to determine user registration permissions, which...

WordPress WPFunnels plugin <= 3.6.2 - Unauthorized User Registration vulnerability

Unauthorized User Registration vulnerability discovered by Ahmed Rayen Ayari in WordPress Plugin WPFunnels versions = 3.6.2...

WordPress WPFunnels plugin <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal vulnerability

Authenticated Administrator+ Arbitrary File Deletion via Path Traversal vulnerability discovered by vodanh in WordPress Plugin WPFunnels versions = 3.6.2...

CVE-2025-12000

The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpfnldeletelog function in all versions up to, and including, 3.6.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete...

EUVD-2025-38358

The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 3.6.2. This is due to the plugin relying on a user controlled value...