CVE-2025-12353: medium-severity vulnerability in getwpfunnels WPFunnels – Funnel Builder for…
WPFunnels <= 3.6.2 - Unauthorized User Registration
Published · Updated
Follow this CVE+ Monitor WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.2%
The WPFunnels – The Easiest Funnel Builder For WordPress And WooCommerce To Collect Leads And Increase Sales plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 3.6.2. This is due to the plugin relying on a user controlled value 'optin_allow_registration' to determine if user registration is allowed, instead of the site-specific setting. This makes it possible for unauthenticated attackers to register new user accounts, even when user registration is disabled.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
getwpfunnels · WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click UpsellRelated CVEs — getwpfunnels WPFunnels – Funnel Builder for…
In the same product, most dangerous first.
CVE-2026-14345CRITICALWPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' ParameterEPSS 1.4%CVE-2026-13080MEDIUMWPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' ParameterEPSS 1.2%CVE-2025-12000MEDIUMWPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path TraversalEPSS 0.8%CVE-2024-10792MEDIUMEasiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2026-15103HIGHWPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path ParameterEPSS 0.6%CVE-2026-84908MEDIUMWPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX ActionEPSS 0.4%