Unrated severityNVD Advisory· Published Sep 4, 2026

CVE-2026-79630

Description

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduced price carried through to the total of the order they place.

Affected products

WordPress/Wpfunnelsllm-fuzzy
Range: <3.13.0
Package: https://wordpress.org/plugins/wpfunnels

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/fb49c59a-f79f-495c-a23e-0e1629cfa53e/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000