Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Upsell Funnel Builder for WooCommerce 3.0.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: April 24, 2025

The “Upsell Funnel Builder for WooCommerce” plugin, which is used on WordPress websites, has a security vulnerability. This means that anyone can change the product and discount information for an order before it is processed. This allows unauthorized people to change the product and discount for any order they want.

Detected in:

Upsell Funnel Builder for WooCommerce fixed vulnerable versions: >= * <= 3.0.0
Upsell Funnel Builder for WooCommerce – Double the Conversions with our new Marketing Funnel Builder and Sales Funnel Builder tailored for your store. fixed vulnerable versions:
Upsell Funnel Builder for WooCommerce – New Marketing Funnel Builder and Sales Funnel Builder tailored for your store. fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.