Vulnerabilities / CartFlows – Funnel Builder & Checkout Plugin for WooCommerce
CartFlows – Funnel Builder & Checkout Plugin for WooCommerce vulnerabilities
Advisories WPSec published for CartFlows – Funnel Builder & Checkout Plugin for WooCommerce. Other sources may list more. Its attack surface: CartFlows – Funnel Builder & Checkout Plugin for WooCommerce on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2256 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Shortcode Execution via Checkout, Optin and Thank You Page Output | High 7.3 | 3.3.1 |
| 2026-11-03 | WPSEC-2026-2255 | CartFlows – Funnel Builder & Checkout Plugin for WooCommerce <= 3.3.0 - Unauthenticated Payment Bypass via Optin Form Checkout | Medium 5.3 | 3.3.1 |
License: CC BY 4.0