CVE-2026-79631
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 04, 2026
Vendor
unknown
Description
The WPFunnels WordPress plugin before 3.13.0 does not restrict access to the log files it writes to a predictable location under the public uploads directory, allowing unauthenticated users to download customer order details and opt-in form submissions when logging is enabled.