WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell vulnerabilities

2 known vulnerabilities in WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell from Getwpfunnels. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WPFunnels – Funnel Builder for WooCommerce…: Improper Privilege Management

  CVE-2026-15103Jul 16, 2026Getwpfunnels

  The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Privilege Escalation via arbitrary option update in all versions up to, and including, 3.12.8. This is due to the `update_settings()` REST cal

• 9.8 Critical severity

  WPFunnels – Funnel Builder for WooCommerce…: Unrestricted Upload of File with Dangerous Type

  CVE-2026-14345Jul 7, 2026GetwpfunnelsEPSS 1.39%

  The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.12.7 via the 'postData' parameter parameter. This is due to unsanitized write of