<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: getwpfunnels-wpfunnels-funnel-builder-for-woocommerce-with-checkout-one-click-up</title><description>Every new CVE for getwpfunnels-wpfunnels-funnel-builder-for-woocommerce-with-checkout-one-click-up.</description><link>https://agentprime.io/</link><item><title>CVE-2026-84908: WPFunnels &lt;= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via &apos;wpfnl_load_payment&apos; AJAX Action</title><link>https://agentprime.io/advisories/CVE-2026-84908/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84908/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 05:31:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15103: WPFunnels &lt;= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via &apos;group_id&apos; Path Parameter</title><link>https://agentprime.io/advisories/CVE-2026-15103/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15103/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Jul 2026 08:26:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13080: WPFunnels &lt;= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via &apos;logKey&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-13080/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13080/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 06:52:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14345: WPFunnels &lt;= 3.12.7 - Unauthenticated Remote Code Execution via &apos;postData&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-14345/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14345/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Jul 2026 05:34:19 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-0626: WPFunnels &lt;= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;wpf_optin_form&apos; Shortcode</title><link>https://agentprime.io/advisories/CVE-2026-0626/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-0626/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 04 Apr 2026 11:16:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12000: WPFunnels &lt;= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal</title><link>https://agentprime.io/advisories/CVE-2025-12000/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12000/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Nov 2025 03:27:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12353: WPFunnels &lt;= 3.6.2 - Unauthorized User Registration</title><link>https://agentprime.io/advisories/CVE-2025-12353/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12353/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 08 Nov 2025 03:27:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-10792: Easiest Funnel Builder For WordPress &amp; WooCommerce by WPFunnels &lt;= 3.5.5 - Reflected Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-10792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-10792/</guid><description>CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 21 Nov 2024 09:32:49 GMT</pubDate><category>CVE</category></item></channel></rss>