funnelforms vulnerabilities and fixes

Recent CVEs affecting funnelforms, with upgrade or downgrade steps. 11 tracked.

funnelforms has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 11. Most recent: 2023-11-22. Highest priority: CVE-2023-4950 (score 37/100).

• CVE-2023-5419 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5417 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5416 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5415 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5411 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5387 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5386 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5385 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
• CVE-2023-5383 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and i
• CVE-2023-5382 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and i
• CVE-2023-4950 MEDIUM 6.1 UPGRADE The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and esc

FAQ

How do I fix funnelforms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is funnelforms being exploited right now?

None of the tracked funnelforms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which funnelforms CVE should I patch first?

CVE-2023-4950 currently ranks highest (37/100): The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and esc.

RSS feed for funnelforms · ← Back to latest CVEs