https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:11:28 +0000 https://cve.radiocsirt.org/vuln/cve-2026-14345 <p><strong>Affected:</strong> getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout &amp; One Click Upsell</p> <p>The WPFunnels – Funnel Builder for WooCommerce with Checkout &amp; One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the &#39;postData&#39; parameter parameter. This is due to unsanitized write of attacker-controlled postData values into a PHP-includeable .log file combined with the use of include_once to render that file in wpfnl_show_log. This makes it possible for unauthenticated attackers to execute code on the server. Exploitation requires that the Log Settings &#34;Enable Logs&#34; toggle is on and that an administrator subsequently opens the polluted log file via the plugin&#39;s Log Settings View UI; however, the nonce required to reach the optin endpoint is publicly emitted on every funnel step page, so the injection step itself is fully unauthenticated.</p> <p><strong>Affected:</strong> getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout &amp; One Click Upsell</p> <p>The WPFunnels – Funnel Builder for WooCommerce with Checkout &amp; One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the &#39;postData&#39; parameter parameter. This is due to unsanitized write of attacker-controlled postData values into a PHP-includeable .log file combined with the use of include_once to render that file in wpfnl_show_log. This makes it possible for unauthenticated attackers to execute code on the server. Exploitation requires that the Log Settings &#34;Enable Logs&#34; toggle is on and that an administrator subsequently opens the polluted log file via the plugin&#39;s Log Settings View UI; however, the nonce required to reach the optin endpoint is publicly emitted on every funnel step page, so the injection step itself is fully unauthenticated.</p> https://cve.radiocsirt.org/vuln/cve-2026-14345