Advisories · Technology
getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell.
Every CVE that names getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Broken access control
- CVSS 8.8 High
WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Privilege escalation
- CVSS 6.6 Medium
WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- File inclusion
- CVSS 9.8 CriticalCritical · CVSS 9+
WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Unrestricted file upload
- CVSS 6.4 Medium
WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Path traversal
- CVSS 5.3 Medium
WPFunnels <= 3.6.2 - Unauthorized User Registration
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Broken access control
- CVSS 6.1 Medium
Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting
- getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
- Cross-site scripting (XSS)