Getwpfunnels Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell
4 CVEs affecting Getwpfunnels Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell. Latest disclosed: 2026-04-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12000 | Medium | 6.5 | 2025-11-08 | The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpfnl_delete_log() function in all… |
CVE-2026-0626 | Medium | 6.4 | 2026-04-04 | The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… |
CVE-2024-10792 | Medium | 6.1 | 2024-11-21 | The Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post_id' para… |
CVE-2025-12353 | Medium | 5.3 | 2025-11-08 | The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for WordPress is vulnerable to unauthorized… |