Vulnerabilidades em WPFunnels
11 resultadosAnálise Vexday
WPFunnels registra 11 vulnerabilidades na base, com 1 crítica e nenhuma sob ataque ativo atualmente, reduzindo o risco imediato. A fraqueza dominante é Cross-Site Scripting (CWE-79), padrão em plugins WordPress, requerendo validação rigorosa de entrada. O ritmo de descobertas é moderado (1 em 90 dias), sugerindo exposição incremental mas não urgência de remediação.
CVE-2025-47530CRITICALWordPress WPFunnels plugin <= 3.5.18 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2025-47541HIGHWordPress Mail Mint plugin <= 1.17.7 - Sensitive Data Exposure VulnerabilityEPSS 0.4%CVE-2025-58604HIGHWordPress Mail Mint Plugin <= 1.18.5 - SQL Injection VulnerabilityEPSS 0.4%CVE-2024-27965MEDIUMWordPress WPFunnels plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-59570HIGHWordPress Mail Mint Plugin <= 1.18.6 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-23541HIGHWordPress Mail Mint plugin <= 1.19.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-67571MEDIUMWordPress WPFunnels plugin <= 3.6.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-69359MEDIUMWordPress Creator LMS plugin <= 1.1.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32530HIGHWordPress Creator LMS plugin <= 1.1.18 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-54696MEDIUMWordPress WPFunnels plugin <= 3.5.26 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-49778HIGHWordPress WPFunnels Pro plugin <= 2.9.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%