Security Advisory
CVE-2026-79631
5.3
MEDIUM
Vulnerability Description
The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory