WF
Product
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 6Low 0
Watch
Add WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13080 | 6.6 | Jul 9 | WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter Affected: through 3.12.7 |
| CVE-2025-12000 | 6.5 | Nov 8 | WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal Affected: through 3.6.2 |
| CVE-2026-0626 | 6.4 | Apr 4 | WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode Affected: through 3.7.9 |
| CVE-2024-10792 | 6.1 | Nov 21 | Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting Affected: through 3.5.5 |
| CVE-2026-84908 | 5.3 | Sep 9 | WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action Affected: through 3.12.13 |
| CVE-2025-12353 | 5.3 | Nov 8 | WPFunnels <= 3.6.2 - Unauthorized User Registration Affected: through 3.6.2 |
Showing 6