Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.1%	CVE-2026-62029WPFunnels · Cross-site Scripting Medium6.5EPSS 0.1%2026-10-09CVE Database V5CVE-2026-62029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunnels: from n/a through 3.13.3. EPSS 0.1%Vulnerability WPFunnels Team	CVE Database V5	2026-10-09
Medium	6.5	EPSS 0.1%	CVE-2026-104386WP VR · Missing Authorization Medium6.5EPSS 0.1%2026-10-05CVE Database V5CVE-2026-104386 CVE-2026-104386 is a missing authorization vulnerability in the WP VR plugin by WPFunnels Team. It affects versions from initial releases up to 9.1.3. The flaw allows exploitation of incorrectly configured access control security levels, potentially leading to partial compromise of confidentiality, integrity, and availability. The vulnerability has a medium severity with a CVSS score of 6.5. EPSS 0.1%Vulnerability WPFunnels Team	CVE Database V5	2026-10-05
Medium	4.3	EPSS 0.3%	CVE-2026-27349Mail Mint · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.3%2026-05-21CVE Database V5CVE-2026-27349 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5. EPSS 0.3%Vulnerability WPFunnels Team #cwe-497	CVE Database V5	2026-05-21

Showing 1–3 of 3 results