{"items":[{"id":"CVE-2025-62758","published":"2025-12-31T08:55:12.187Z","updated":"2026-04-28T16:14:04.234Z","title":"WordPress Funnelforms Free plugin <= 3.8 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Funnelforms","product":"Funnelforms Free","kev":false,"epss":0.00164,"kevAdded":null},{"id":"CVE-2025-68582","published":"2025-12-24T13:10:40.817Z","updated":"2026-04-28T16:14:30.660Z","title":"WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Funnelforms","product":"Funnelforms Free","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2024-10587","published":"2024-12-04T02:40:25.489Z","updated":"2026-04-08T17:00:17.035Z","title":"Funnelforms Free <= 3.7.5.1 - Authenticated (Contributor+) PHP Object Injection","severity":"HIGH","score":8.8,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00623,"kevAdded":null},{"id":"CVE-2024-5857","published":"2024-08-29T03:30:44.662Z","updated":"2026-04-08T16:55:42.056Z","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion","severity":"MEDIUM","score":5.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2024-7447","published":"2024-08-28T11:31:24.972Z","updated":"2026-04-08T17:10:40.610Z","title":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload","severity":"MEDIUM","score":5.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2024-6311","published":"2024-08-28T06:43:30.912Z","updated":"2026-04-08T17:23:37.991Z","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Upload","severity":"HIGH","score":7.2,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00907,"kevAdded":null},{"id":"CVE-2024-6312","published":"2024-08-28T06:43:30.277Z","updated":"2026-04-08T16:47:56.801Z","title":"Funnelforms Free <= 3.7.3.2 - Authenticated (Administrator+) Arbitrary File Deletion","severity":"MEDIUM","score":6.5,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.01071,"kevAdded":null},{"id":"CVE-2023-5385","published":"2023-11-22T15:33:37.255Z","updated":"2026-04-08T17:29:11.446Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2023-5383","published":"2023-11-22T15:33:35.385Z","updated":"2026-04-08T17:25:35.319Z","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2023-5387","published":"2023-11-22T15:33:34.930Z","updated":"2026-04-08T17:23:50.887Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2023-5416","published":"2023-11-22T15:33:32.162Z","updated":"2026-04-08T17:10:49.267Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2023-5411","published":"2023-11-22T15:33:30.215Z","updated":"2026-04-08T17:03:45.199Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Post Modification","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2023-5382","published":"2023-11-22T15:33:27.505Z","updated":"2026-04-08T17:00:51.838Z","title":"Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion","severity":"MEDIUM","score":6.5,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2023-5415","published":"2023-11-22T15:33:26.588Z","updated":"2026-04-08T16:59:46.644Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2023-5419","published":"2023-11-22T15:33:25.228Z","updated":"2026-04-08T16:57:29.375Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2023-5386","published":"2023-11-22T15:33:23.381Z","updated":"2026-04-08T16:48:21.063Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion","severity":"MEDIUM","score":6.5,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2023-5417","published":"2023-11-22T15:33:20.139Z","updated":"2026-04-08T16:36:48.918Z","title":"Funnelforms Free <= 3.4 - Missing Authorization to Category Update","severity":"MEDIUM","score":4.3,"vendor":"funnelforms","product":"Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free","kev":false,"epss":0.00466,"kevAdded":null}]}