SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-84754

MEDIUM · CVSS 6.5 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-09-03 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

WPFunnels versions up to 3.12.13 are susceptible to unauthenticated broken access control, allowing unauthorized users to access restricted functionalities. This vulnerability could lead to data exposure or manipulation, impacting the integrity of sensitive information. Organizations using affected versions should prioritize remediation to safeguard their applications against potential exploitation.

CVE
CVE-2026-84754
Severity
MEDIUM
CVSS
6.5
EPSS
0.24%

Original NVD Description

Unauthenticated Broken Access Control in WPFunnels <= 3.12.13 versions.