WPFunnels vulnerabilities
We track 5 vulnerabilities in WPFunnels products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
Latest WPFunnels vulnerabilities
- 8.8 High severity
Creator LMS: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in WPFunnels Creator LMS creatorlms allows Privilege Escalation.This issue affects Creator LMS: from n/a through <= 1.1.18.
- 7.5 High severity
Mail Mint: Missing Authorization
Missing Authorization vulnerability in WPFunnels Mail Mint mail-mint allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Mail Mint: from n/a through <= 1.19.4.
- 7.6 High severity
Mail Mint: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.6.
- 7.6 High severity
Mail Mint: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFunnels Mail Mint mail-mint allows SQL Injection.This issue affects Mail Mint: from n/a through <= 1.18.5.
- 9.8 Critical severity
WPFunnels: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels wpfunnels allows Object Injection.This issue affects WPFunnels: from n/a through <= 3.5.18.