Read the docs

WPFunnels Team

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WPFunnels Team records in CISA KEV

No WPFunnels Team vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-82453 CVE-2026-118091 · GHSA-4p38-grcv-9g52

Missing authorization in WPFunnels WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through 3.13.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00176 Published 2026-10-29 No fix listed CWE-862
TI-2026-82452 CVE-2026-118088 · GHSA-wgcw-xxff-j2j2

Missing authorization in WPFunnels WordPress plugin

Priority LOW 29

Missing Authorization vulnerability in WPFunnels Team WPFunnels wpfunnels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPFunnels: from n/a through 3.13.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-29 No fix listed CWE-862
TI-2026-82394 CVE-2026-118093 · GHSA-xqjc-r2xc-4gq6

Missing authorization in WPFunnels Product Feed Manager plugin

Priority LOW 29

Missing Authorization vulnerability in WPFunnels Team Product Feed Manager best-woocommerce-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Product Feed Manager: from n/a t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-29 No fix listed CWE-862
TI-2026-69981 CVE-2026-62029 · GHSA-q6j8-278g-m9m6

Stored cross-site scripting in WPFunnels WordPress plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through 3.13.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-09 No fix listed CWE-79
TI-2026-67641 CVE-2026-104386 · GHSA-5wxq-rv94-7mpw

Missing authorization in WPFunnels Team WP VR WordPress plugin

Priority LOW 28

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00146 Published 2026-10-05 No fix listed CWE-862
TI-2026-82458 CVE-2026-27062 · GHSA-g2hf-qh9g-rm5c

Cross-site request forgery in WordPress WPFunnels plugin

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in WPFunnels Team WPFunnels wpfunnels allows Cross Site Request Forgery.This issue affects WPFunnels: from n/a through 3.13.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00098 Published 2026-10-29 No fix listed CWE-352
Open these records in search →