Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free vulnerabilities

2 known vulnerabilities in Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free from Funnelforms. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Interactive Contact Form and Multi Step Form…: Deserialization of Untrusted Data

  CVE-2024-10587Dec 4, 2024Funnelforms

  The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.5.1 via deserialization of untrusted input. This makes it p

• 7.2 High severity

  Interactive Contact Form and Multi Step Form…: Unrestricted Upload of File with Dangerous Type

  CVE-2024-6311Aug 28, 2024Funnelforms

  The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'af2_add_font' function in all versions up to, and including, 3.7.3.2. This makes it possible for authenticated attackers, with adminis