WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell

Explore WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell vulnerabilities across all versions. Currently tracking 16 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell vulnerabilities before they are exploited.

Vulnerability Records

16 records


2026-07-15 20:13	WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter WPFunnels <= 3.12.8	`CVE-2026-15103`	8.8 High	Wordfence PRISM	Yes
2026-07-08 00:00	WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter WPFunnels <= 3.12.7	`CVE-2026-13080`	6.6 Medium	IAmNewbie	Yes
2026-07-06 16:35	WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter WPFunnels <= 3.12.7	`CVE-2026-14345`	9.8 Critical	thevietronin	Yes
2026-04-03 22:13	WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode WPFunnels <= 3.7.9	`CVE-2026-0626`	6.4 Medium	Paolo Tresso	Yes
2025-11-15 00:00	WPFunnels <= 3.6.2 - Missing Authorization WPFunnels <= 3.6.2	`CVE-2025-67571`	5.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-11-07 15:07	WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal WPFunnels <= 3.6.2	`CVE-2025-12000`	6.5 Medium	vodanh	Yes
2025-11-07 15:06	WPFunnels <= 3.6.2 - Unauthorized User Registration WPFunnels <= 3.6.2	`CVE-2025-12353`	5.3 Medium	Ahmed Rayen Ayari	Yes
2025-07-30 00:00	WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting WPFunnels <= 3.5.26	`CVE-2025-54696`	6.4 Medium	Denver Jackson	Yes
2025-05-12 00:00	WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection WPFunnels <= 3.5.18	`CVE-2025-47530`	9.8 Critical	timomangcut	Yes
2024-11-20 00:00	Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting WPFunnels <= 3.5.5	`CVE-2024-10792`	6.1 Medium	Nathaniel Oh (Calysteon)	Yes

Showing 1–10 of 16 reports