Is the WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin safe?
Below are the known, publicly disclosed vulnerabilities of the WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell (WordPress) component. If you use it on your site, check the version and update it before the flaw gets exploited.
Known vulnerabilities
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell: eskalacja uprawnień
Eskalacja uprawnień w komponencie WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell. Ocena zagrożenia: Wysoka (CVSS 8.8). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell: zdalne wykonanie kodu (RCE)
Zdalne wykonanie kodu (RCE) w komponencie WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell. Ocena zagrożenia: Krytyczna (CVSS 9.8). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.
How to check whether this affects you
- Check the installed version of the WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell component in the admin panel.
- Compare it with the fixed version noted in the details of the relevant vulnerability above.
- If your version is older, update the component to the latest available.
- If a fix has not been released yet, temporarily disable the vulnerable element and watch your logs.
Is this plugin putting your site at risk?
We will run a free audit: we check versions, plugins and configuration, and tell you plainly whether you are safe.
Request a free audit →