WPFunnels Team

Products

Product	CVEs	Exploited	Latest
WPFunnels	4	–	Oct 29, 2026
Drag & Drop Sales Funnel Builder for WordPress – WPFunnels	1	–	Jul 27, 2023
Mail Mint	1	–	May 21, 2026
Product Feed Manager	1	–	Oct 29, 2026
WP VR	1	–	Oct 5, 2026

CVE-2026-27062 Medium 4.3 WordPress WPFunnels plugin <= 3.13.5 - Cross Site Request Forgery (CSRF) vulnerability <0.1%
CVE-2026-118088 Medium 5.3 WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability 0.2%
CVE-2026-118091 Medium 5.3 WordPress WPFunnels plugin <= 3.13.5 - Broken Access Control vulnerability 0.2%
CVE-2026-118093 Medium 5.3 WordPress Product Feed Manager plugin <= 7.14.1 - Broken Access Control vulnerability 0.2%
CVE-2026-62029 Medium 6.5 WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerability 0.1%
CVE-2026-104386 Medium 6.5 WordPress WP VR plugin <= 9.1.3 - Broken Access Control vulnerability 0.1%
CVE-2026-27349 Medium 4.3 WordPress Mail Mint plugin <= 1.19.5 - Sensitive Data Exposure vulnerability 0.2%
CVE-2023-37977 High 7.1 WordPress WPFunnels Plugin <= 2.7.16 is vulnerable to Cross Site Scripting (XSS) 0.4%