PT-2025-45553

Name of the Vulnerable Software and Affected Versions WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales versions prior to 3.6.3 Description The WPFunnels plugin for WordPress is susceptible to unauthorized user registration. The plugin...

EUVD-2023-41804

Malicious code in bioql PyPI...

EUVD-2024-25139

Malicious code in bioql PyPI...

EUVD-2025-30509

Malicious code in bioql PyPI...

EUVD-2025-28091

Malicious code in bioql PyPI...

EUVD-2025-26562

Malicious code in bioql PyPI...

EUVD-2024-33459

Malicious code in bioql PyPI...

EUVD-2025-24698

Malicious code in bioql PyPI...

CVE-2025-59570

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.6...

PT-2025-39045

Name of the Vulnerable Software and Affected Versions WPFunnels Mail Mint versions through 1.18.6 Description A flaw exists in WPFunnels Mail Mint that allows for SQL Injection. The issue is due to improper neutralization of special elements within SQL commands. This could potentially allow an...

WordPress plugin WPFunnels Mail Mint SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A SQL injection...

CVE-2025-58604

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through = 1.18.5...

CVE-2025-54696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through = 3.5.26...

CVE-2025-54696

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through = 3.5.26...

CVE-2025-54696 WordPress WPFunnels Plugin plugin <= 3.5.26 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels allows Stored XSS. This issue affects WPFunnels: from n/a through 3.5.26...

CVE-2025-54696 WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFunnels WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through = 3.5.26...

CVE-2025-54696

CVE-2025-54696 is a WordPress WPFunnels plugin vulnerability: Stored XSS due to improper input neutralization in web page generation, affecting WPFunnels up to version 3.5.26. The CVSSv3.1 base score is 6.5 (Medium) with network attack vector, low complexity, and user interaction required. Connec...

PT-2025-33248 · Wpfunnels · Wpfunnels

Name of the Vulnerable Software and Affected Versions: WPFunnels versions through 3.5.26 Description: WPFunnels is susceptible to a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Update...

WordPress plugin WPFunnels 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

WordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Denver Jackson in WordPress Plugin WPFunnels versions = 3.5.26...