https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T00:45:07.487481+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-79630 CVE-2026-79630 — WPFunnels < 3.13.0 - Unauthenticated Price Manipulation via Order Bump Product ID Substitution 2026-10-01T00:45:07.908185+00:00

Affected: Unknown WPFunnels

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduced price carried through to the total of the order they place.