Read the docs

getwpfunnels

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

getwpfunnels records in CISA KEV

No getwpfunnels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpfunnels 2 records LOW Drag & Drop Sales Funnel Builder 1 record MEDIUM

Records

1 record in Drag & Drop Sales Funnel Builder · all components

TI-2023-00167 CVE-2023-0173 · GHSA-r9hq-v925-r8jc

WPFunnels < 2.6.9 - Contributor+ Stored XSS

Priority MEDIUM 58

The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could al…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 2.6.9
Open these records in search →