Known vulnerabilities in WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
WooCommerce funnel builder to create custom checkout pages, sales funnels, one-click upsells, and order bumps - all inside WordPress.
14Reported vulnerabilities
9.8Highest CVSS score
3.12.11Latest version
5,000+Active installs
What to do now
Update WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell to 3.12.9 or later.
14 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2026-14345 | Critical | 1.4% | 0 to 3.12.7 (inclusive) | 3.12.8 |
July 7, 2026 |
| CVE-2025-47530 | Critical | 0.5% | 3.5.18 and earlier | 3.5.19 |
May 12, 2025 |
| CVE-2023-0173 | Medium | 0.6% | Before 2.6.9 | 2.6.9 |
February 6, 2023 |
| CVE-2026-15103 | High | 0.3% | 0 to 3.12.8 (inclusive) | 3.12.9 |
July 16, 2026 |
| CVE-2026-13080 | Medium | 1.2% | 0 to 3.12.7 (inclusive) | 3.12.8 |
July 9, 2026 |
| CVE-2025-12000 | Medium | 0.7% | 0 to 3.6.2 (inclusive) | 3.6.3 |
November 8, 2025 |
| CVE-2026-0626 | Medium | 0.2% | 0 to 3.7.9 (inclusive) | 3.8.0 |
April 4, 2026 |
| CVE-2025-54696 | Medium | 0.2% | 3.5.26 and earlier | 3.5.27 |
July 30, 2025 |
| CVE-2024-10792 | Medium | 0.6% | 0 to 3.5.5 (inclusive) | 3.5.6 |
November 21, 2024 |
| CVE-2023-37977 | Medium | 0.4% | Before 2.7.17 | 2.7.17 |
July 27, 2023 |
| CVE-2025-67571 | Medium | 0.2% | 3.6.2 and earlier | 3.6.3 |
November 15, 2025 |
| CVE-2025-12353 | Medium | 0.2% | 0 to 3.6.2 (inclusive) | 3.6.3 |
November 8, 2025 |
| WF-50b26952-bf59-4236-93b4-6b4928609c15 | Medium | — | Before 2.7.16 | 2.7.16 |
July 10, 2023 |
| CVE-2024-27965 | Medium | 0.3% | 3.0.6 and earlier | 3.0.7 |
March 13, 2024 |