Funnelforms

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 20
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    17
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-39440

    WordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerability

    Last Modified: Apr 28, 2026
    Published: Apr 23, 2026

    CVE-2025-62758

    WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability

    Last Modified: Apr 23, 2026
    Published: Dec 31, 2025

    CVE-2025-68582

    WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability

    Last Modified: Apr 27, 2026
    Published: Dec 24, 2025

    CVE-2024-10587

    Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection

    Last Modified: Apr 15, 2026
    Published: Dec 04, 2024

    CVE-2024-5857

    Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion

    Last Modified: Apr 08, 2026
    Published: Aug 29, 2024
    Items Per Page