Known vulnerabilities in WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
WooCommerce funnel builder to create custom checkout pages, sales funnels, one-click upsells, and order bumps - all inside WordPress.
24Reported vulnerabilities
9.8Highest CVSS score
3.12.11Latest version
5,000+Active installs
What to do now
Update WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell to 3.13.2 or later.
23 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2026-14345 | Critical | 1.4% | 0 to 3.12.7 (inclusive) | 3.12.8 |
July 7, 2026 |
| CVE-2025-47530 | Critical | 0.5% | 3.5.18 and earlier | 3.5.19 |
May 12, 2025 |
| CVE-2023-0173 | Medium | 0.6% | Before 2.6.9 | 2.6.9 |
February 6, 2023 |
| CVE-2026-15103 | High | 0.6% | 0 to 3.12.8 (inclusive) | 3.12.9 |
July 16, 2026 |
| CVE-2026-97271 | High | 0.1% | 3.13.1 and earlier | 3.13.2 |
September 30, 2026 |
| CVE-2026-13080 | Medium | 1.2% | 0 to 3.12.7 (inclusive) | 3.12.8 |
July 9, 2026 |
| CVE-2025-12000 | Medium | 0.8% | 0 to 3.6.2 (inclusive) | 3.6.3 |
November 8, 2025 |
| CVE-2026-62029 | Medium | 0.1% | 3.13.3 and earlier | — | October 9, 2026 |
| CVE-2026-0626 | Medium | 0.2% | 0 to 3.7.9 (inclusive) | 3.8.0 |
April 4, 2026 |
| CVE-2025-54696 | Medium | 0.2% | 3.5.26 and earlier | 3.5.27 |
July 30, 2025 |
| CVE-2024-10792 | Medium | 0.6% | 0 to 3.5.5 (inclusive) | 3.5.6 |
November 21, 2024 |
| CVE-2026-27371 | Medium | 0.2% | 3.13.1 and earlier | 3.13.2 |
September 30, 2026 |
| CVE-2023-37977 | Medium | 0.4% | Before 2.7.17 | 2.7.17 |
July 27, 2023 |
| CVE-2026-97269 | Medium | 0.2% | 3.13.1 and earlier | 3.13.2 |
October 1, 2026 |
| CVE-2026-84908 | Medium | 0.4% | 0 to 3.12.13 (inclusive) | 3.13.0 |
September 9, 2026 |
| CVE-2025-15691 | Medium | 0.2% | Before 3.13.0 | 3.13.0 |
September 4, 2026 |
| CVE-2026-79631 | Medium | 0.3% | Before 3.13.0 | 3.13.0 |
September 4, 2026 |
| CVE-2026-79632 | Medium | 0.3% | Before 3.13.0 | 3.13.0 |
September 4, 2026 |
| CVE-2026-84754 | Medium | 0.3% | 3.12.13 and earlier | 3.13.0 |
September 3, 2026 |
| CVE-2026-79630 | Medium | 0.3% | Before 3.13.0 | 3.13.0 |
September 2, 2026 |
| CVE-2025-67571 | Medium | 0.2% | 3.6.2 and earlier | 3.6.3 |
November 15, 2025 |
| CVE-2025-12353 | Medium | 0.2% | 0 to 3.6.2 (inclusive) | 3.6.3 |
November 8, 2025 |
| WF-50b26952-bf59-4236-93b4-6b4928609c15 | Medium | — | Before 2.7.16 | 2.7.16 |
July 10, 2023 |
| CVE-2024-27965 | Medium | 0.3% | 3.0.6 and earlier | 3.0.7 |
March 13, 2024 |