PatchTheCVEfunnelforms free vulnerabilities and fixes
Recent CVEs affecting funnelforms free, with upgrade or downgrade steps. 5 tracked.
Also searched as: funnelformsfree.
funnelforms free has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-08-29. Highest priority: CVE-2024-6311 (score 40/100).
- CVE-2024-7447 MEDIUM 5.3 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for
- CVE-2024-6312 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and
- CVE-2024-6311 HIGH 7.2 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val
- CVE-2024-5857 MEDIUM 5.3 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for
- CVE-2023-5990 MEDIUM 6.5 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2
FAQ
How do I fix funnelforms free vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funnelforms free being exploited right now?
None of the tracked funnelforms free CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funnelforms free CVE should I patch first?
CVE-2024-6311 currently ranks highest (40/100): The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val.