CVE-2026-79630

Name of the Vulnerable Software and Affected Versions WPFunnels versions prior to 3.13.0

Description The plugin fails to verify if the product requested via a checkout order bump matches the product for which the discount was configured. This allows unauthenticated users to manipulate the price and obtain any purchasable product using a discount intended for a different item, which then reduces the total order price.

Recommendations Update to version 3.13.0 or later.