CA
Vendor
Cartflows
7
CVEs
0
On KEV
0
New 30D
Products
CA6.1
Cartflows
Cartflows
4 CVEs0 on KEV0 new
CP6.1
CartFlows Pro
CartFlows
1 CVEs0 on KEV0 new
FB6.4
Funnel Builder
Cartflows
1 CVEs0 on KEV0 new
WC6.8
Woocommerce Cart Abandonment Recovery
Cartflows
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-4632 | FB Funnel Builder Cartflows | 6.4 | Jun 19 | WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-2322 | WC Woocommerce Cart Abandonment Recovery Cartflows | 6.8 | Apr 3 | WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF |
| CVE-2023-36686 | CP CartFlows Pro CartFlows | 6.1 | Aug 5 | WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2020-36736 | CA Cartflows Cartflows | 4.3 | Jul 1 | WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass |
| CVE-2019-25151 | CA Cartflows Cartflows | 4.3 | Jun 7 | Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation |
| CVE-2021-24330 | CA Cartflows Cartflows | 4.8 | Jun 1 | Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID |