Log in Start free

Funnelforms

Products

ProductCVEsExploitedLatest
Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free15–Dec 4, 2024
Funnelforms Free2–Dec 31, 2025

Exploited and recent CVEs

  • CVE-2025-62758 Medium 6.5 WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68582 Medium 5.3 WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability 0.3%
  • CVE-2024-10587 High 8.8 Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection 0.6%
  • CVE-2024-5857 Medium 5.3 Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion 0.3%
  • CVE-2024-7447 Medium 5.3 Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload 0.4%
  • CVE-2024-6311 High 7.2 Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload 0.9%
  • CVE-2024-6312 Medium 6.5 Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion 1.1%
  • CVE-2023-5385 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication 0.5%
  • CVE-2023-5383 Medium 4.3 Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication 0.3%
  • CVE-2023-5387 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode 0.5%
  • CVE-2023-5416 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion 0.5%
  • CVE-2023-5411 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Post Modification 0.5%
  • CVE-2023-5382 Medium 6.5 Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion 0.3%
  • CVE-2023-5415 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation 0.5%
  • CVE-2023-5419 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending 0.5%
  • CVE-2023-5386 Medium 6.5 Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion 0.5%
  • CVE-2023-5417 Medium 4.3 Funnelforms Free <= 3.4 - Missing Authorization to Category Update 0.5%