Pricing
Case studies
Login
Start trial
Funnelforms Free
N/A
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
No VDP
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
3 present
9 patched
4 Mitigation rules
WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion vulnerability
<= 3.7.3.2
02/02/2026
Cross Site Scripting (XSS) vulnerability
<= 3.8
31/12/2025
Broken Access Control vulnerability
<= 3.8
25/12/2025
Authenticated (Contributor+) PHP Object Injection vulnerability
<= 3.7.5.1
03/12/2024
Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability
<= 3.7.3.2
28/08/2024
Authenticated (Administrator+) Arbitrary File Deletion vulnerability
<= 3.7.3.2
28/08/2024
Authenticated (Administrator+) Arbitrary File Upload vulnerability
<= 3.7.3.2
28/08/2024
Cross-Site Request Forgery to Arbitrary Post Duplication vulnerability
<= 3.4
02/11/2023
Cross-Site Request Forgery to Arbitrary Post Deletion vulnerability
<= 3.4
02/11/2023
Multiple Missing Authorization vulnerability
<= 3.4
02/11/2023
Unauthenticated Stored Cross-Site Scripting vulnerability
< 3.4
19/09/2023
WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin < 3.3.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
< 3.3.8.5
18/07/2023