Lucene search
+L

236 matches found

CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•17 views

WordPress plugin WPFunnels 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•2 views

CVE-2025-54696: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through = 3.5.26...

6.5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/07/30 3:03 p.m.•17 views

WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Denver Jackson in WordPress Plugin WPFunnels versions = 3.5.26...

6.5CVSS5.9AI score0.00222EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/25 1:19 p.m.•36 views

CVE-2025-47541

Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...

7.5CVSS7.2AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/25 1:19 p.m.•31 views

CVE-2025-47530

Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through = 3.5.18...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/23 1:15 p.m.•16 views

CVE-2025-47530

Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through = 3.5.18...

9.8CVSS0.00465EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/23 12:43 p.m.•38 views

CVE-2025-47530 WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through = 3.5.18...

9.8CVSS0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/23 12:43 p.m.•11 views

CVE-2025-47530 WordPress WPFunnels <= 3.5.18 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels allows Object Injection. This issue affects WPFunnels: from n/a through 3.5.18...

9.8CVSS9.5AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/23 12:43 p.m.•15 views

CVE-2025-47541 WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint mail-mint allows Retrieve Embedded Sensitive Data.This issue affects Mail Mint: from n/a through = 1.17.7...

7.5CVSS8.6AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/23 12:43 p.m.•73 views

CVE-2025-47541

CVE-2025-47541 affects WordPress Mail Mint plugin (versions up to 1.17.7). The issue is described as an insertion of sensitive information into sent data, allowing retrieval of embedded sensitive data. Public sources and vulnerability records consistently list this as a sensitive data exposure vu...

7.5CVSS7.2AI score0.00452EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:58 a.m.•23 views

CVE-2024-27965

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels.This issue affects WPFunnels: from n/a through = 3.0.6...

5.9CVSS7.2AI score0.00339EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:20 a.m.•20 views

CVE-2024-10792

The Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'postid' parameter in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS6.4AI score0.00607EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:36 a.m.•25 views

CVE-2023-37977

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFunnels Team Drag & Drop Sales Funnel Builder for WordPress – WPFunnels plugin = 2.7.16 versions...

7.1CVSS6AI score0.00382EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/23 12:00 a.m.•4 views

CVE-2025-47530: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through = 3.5.18...

9.8CVSS5.8AI score0.00465EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/23 12:00 a.m.•24 views

PT-2025-22752 · Wpfunnels · Wpfunnels

Name of the Vulnerable Software and Affected Versions: WPFunnels versions 3.5.18 and earlier Description: The issue is related to Deserialization of Untrusted Data, allowing Object Injection in WPFunnels. Recommendations: For versions 3.5.18 and earlier, update to a version later than 3.5.18 to...

9.8CVSS9.4AI score0.00465EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/05/23 12:00 a.m.•19 views

WordPress plugin WPFunnels 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS8.7AI score0.00465EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/23 12:00 a.m.•17 views

PT-2025-22755 · Wpfunnels · Wpfunnels Mail Mint

Name of the Vulnerable Software and Affected Versions: WPFunnels Mail Mint versions 1.17.7 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. Recommendations: For WPFunnels Mail Mint versions 1.17.7 and...

7.5CVSS7.8AI score0.00452EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/05/12 4:06 p.m.•17 views

WordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by timomangcut in WordPress Plugin WPFunnels versions = 3.5.18...

9.8CVSS8.4AI score0.00465EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/05/07 10:52 a.m.•22 views

WordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Denver Jackson in WordPress Plugin Mail Mint versions = 1.17.7...

7.5CVSS8.2AI score0.00452EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2024/11/21 10:51 p.m.•19 views

WordPress WPFunnels plugin <= 3.5.5 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Nathan calysteon in WordPress Plugin WPFunnels versions = 3.5.5...

6.1CVSS6.3AI score0.00607EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder