A Cross-Site Request Forgery (CSRF) vulnerability exists in WPFunnels up to version 3.13.5. This vulnerability allows an attacker to induce a user to perform unwanted actions on a web application in which they are authenticated. The CVSS score is 4.3, indicating a medium severity level with low complexity and no privileges required for exploitation.