WPFunnels Creator LMS Privilege Escalation Vulnerability
Vulnerability
A privilege escalation vulnerability has been identified in the WPFunnels Creator LMS plugin, affecting versions through 1.1.18. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control over the website.
Impact
Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the website.
Remediation
Users of the WPFunnels Creator LMS plugin should update to version 1.1.19 or later. Patchstack users can enable auto-update for vulnerable plugins.
Added: Mar 25, 2026, 6:07 PM
Updated: Mar 25, 2026, 6:07 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
0.0relevance
4.7threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.