CVE-2026-15103 | WPFunnels Plugin up to 3.12.8 on WordPress REST callback update_settings group_id incorrect regex

July 16, 2026 Yanac

A vulnerability, which was classified as critical, was found in WPFunnels Plugin up to 3.12.8 on WordPress. This affects the function update_settings of the component REST callback. Executing a manipulation of the argument group_id can lead to incorrect regular expression.

This vulnerability is handled as CVE-2026-15103. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More