CVE-2026-104386

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...

EUVD-2026-92304

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...

CVE-2026-84753

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-84753 CVE-2026-84753 Mail Mint 1.31.0 - WPFunnels I am @abraxasnull. Loopback lab. The client is CVE-2026-84753-Abraxas-Labs.py. The function is named safe. Unauthenticated REST mint-form-submit copies extra...

CVE-2026-97269

Unauthenticated Insecure Direct Object References IDOR in WPFunnels = 3.13.1 versions...

CVE-2026-97269

The WPFunnels WordPress plugin (versions

EUVD-2026-90836

Unauthenticated Insecure Direct Object References IDOR in WPFunnels = 3.13.1 versions...

CVE-2026-97269 WordPress WPFunnels plugin <= 3.13.1 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in WPFunnels = 3.13.1 versions...

CVE-2026-97271

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-27371

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-97271 WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-97271

The WPFunnels WordPress plugin, version 3.13.1 and below , is vulnerable to an unauthenticated Cross Site Scripting (XSS) vulnerability. Technical details regarding the specific component or root cause are not provided in the documents. The CVSS 3.1 score is 7.1 (High) , with a vector of CVSS:3.1...

EUVD-2026-89921

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

EUVD-2026-89816

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-27371 WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-27371 WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-27371

The WPFunnels plugin for WordPress versions

WordPress WPFunnels plugin <= 3.13.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin WPFunnels versions = 3.13.1...

CVE-2026-27371: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

CVE-2026-97271: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WPFunnels = 3.13.1 versions...

WordPress WPFunnels plugin <= 3.12.13 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Aditya Gurav in WordPress Plugin WPFunnels versions = 3.12.13...