PatchTheCVEfunnelforms vulnerabilities
Recent CVEs affecting funnelforms products. 16 tracked.
funnelforms has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 16. Most recent: 2024-08-29. Highest priority: CVE-2024-6311 (score 40/100).
- CVE-2024-7447 MEDIUM 5.3 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for
- CVE-2024-6312 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and
- CVE-2024-6311 HIGH 7.2 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val
- CVE-2024-5857 MEDIUM 5.3 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for
- CVE-2023-5990 MEDIUM 6.5 UPGRADE The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2
- CVE-2023-5419 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5417 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5416 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5415 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5411 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5387 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5386 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5385 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing
- CVE-2023-5383 MEDIUM 4.3 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and i
- CVE-2023-5382 MEDIUM 6.5 UPGRADE The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and i
- CVE-2023-4950 MEDIUM 6.1 UPGRADE The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and esc
FAQ
How do I fix funnelforms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funnelforms being exploited right now?
None of the tracked funnelforms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funnelforms CVE should I patch first?
CVE-2024-6311 currently ranks highest (40/100): The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type val.