Skip to content
PluginCanary

FunnelKit

FunnelKit - Funnel Builder Plugin for WooCommerce Checkout
by FunnelKit · 30,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 107 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for FunnelKit
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Quick answers

Is FunnelKit still maintained?
Yes. Last release 3 Nov 2026, 107 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns FunnelKit, and has it changed hands?
No change recorded. Main committer teamwoofunnels since Mar 2021. 4 Nov 2026 · SVN log
Was FunnelKit removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is FunnelKit safe?
21 known vulnerabilities, all fixed (latest in 3.17.0). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest FunnelKit update safe to install?
No ownership change before 3.18.0. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Nov 2020 to 6 Nov 2020, 1 commits
amans2k11 Feb 2021 to 3 Nov 2026, 329 commits
teamwoofunnels1 Mar 2021 to 24 Mar 2025, 456 commits

3 committers recorded. No ownership change since 2020.

Maintenance

Last release
yesterday
Releases, 24 months
107
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for FunnelKit
Q1 202416
Q2 20245
Q3 20249
Q4 20248
Q1 20255
Q2 20250
Q3 20255
Q4 20259
Q1 20264
Q2 202668
Q3 20267
Q4 20264

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (19 reviews). Lifetime: 5.0.

Average rating per quarter for FunnelKit
Q2 20264.6
Q3 20265.0
Q4 20265.0

Average rating rose from 4.6 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star1009
4 star9
3 star1
2 star3
1 star6
Latest low reviews

Security record

18 vulnerabilities in 24 months (21 on record), all patched (latest fixed in 3.17.0).

Show 21 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter7.5<= 3.16.0.63.17.0Patched before disclosure
9 Oct 2026FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing)7.2<= 3.16.0.53.16.0.6Patched before disclosure
10 Jul 2026FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.15.0.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.15.0.83.15.0.9Patched before disclosure
25 Jun 2026FunnelKit <= 3.15.0.5 - Authenticated (Admin+) Arbitrary File Deletion6.5<= 3.15.0.53.15.0.6Patched before disclosure
25 Jun 2026FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting6.1<= 3.15.0.53.15.0.6Patched before disclosure
24 Jun 2026FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.15.0.5 - Authenticated (Administrator+) SQL Injection4.9<= 3.15.0.53.15.0.6Patched before disclosure
3 Jun 2026FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.15.0.23.15.0.3Patched before disclosure
19 May 2026FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization5.3<= 3.15.0.23.15.0.3Patched before disclosure
27 Apr 2026FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.15.0.1 - Unauthenticated SQL Injection7.5<= 3.15.0.13.15.0.2Patched before disclosure
11 Dec 2025FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection7.5<= 3.13.1.53.13.1.6Patched before disclosure
6 Dec 2025Funnel Builder by FunnelKit <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.13.1.23.13.1.3Patched before disclosure
18 Nov 2025FunnelKit - Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode6.4<= 3.13.1.23.13.1.3Patched before disclosure
15 Oct 2025FunnelKit <= 3.12.0 - Reflected Cross-Site Scripting6.1<= 3.12.03.12.0.1Patched before disclosure
19 Aug 2025Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion8.1<= 3.11.13.12.0Patched before disclosure
18 Aug 2025Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library8.8<= 3.11.0.23.11.1Patched before disclosure
8 Jul 2025Funnel Builder by FunnelKit <= 3.10.2 - Authenticated (Administrator+) SQL Injection4.9<= 3.10.23.11.0Patched before disclosure
7 Apr 2025Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection4.9<= 3.10.13.10.2Patched before disclosure
23 Feb 2025Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion9.8<= 3.9.03.9.1Patched before disclosure
23 Jul 2024Funnel Builder for WordPress by FunnelKit - Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update4.3<= 3.4.63.4.7Patched before disclosure
28 Jun 2024Funnel Builder for WordPress by FunnelKit - Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload6.4<= 3.3.13.4.0Patched before disclosure
21 Dec 2023Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection6.6< 2.14.42.14.4Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FunnelKit
4 May 20261,353
11 May 202613,186
18 May 202615,327
25 May 20265,681
1 Jun 20261,773
8 Jun 20261,701
15 Jun 20261,667
22 Jun 202612,326
29 Jun 202613,420
6 Jul 20267,889
13 Jul 20263,553
20 Jul 20262,215
27 Jul 20261,973
3 Aug 20261,700
10 Aug 202621,193
17 Aug 202624,249
24 Aug 20264,212
31 Aug 202611,246
7 Sep 20264,859
14 Sep 20264,563
21 Sep 20263,262
28 Sep 20262,431
5 Oct 202611,922
12 Oct 202614,417
19 Oct 202613,232
26 Oct 20266,794
2 Nov 2026563

Weekly downloads over the last 4 weeks are 14% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Sliding Cart for WooCommerce byScore 96 · 30,000+Fluid Checkout for WooCommerceScore 96 · 20,000+Modern CartScore 93 · 60,000+Side Cart WoocommerceScore 92 · 70,000+CartFlowsScore 91 · 200,000+

Facts

Version3.18.0
AuthorFunnelKit
Added11 Feb 2021
Last updated3 Nov 2026
Active installs30,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsupsell, checkout, order bump, Funnel Builder, WooCommerce checkout

Other plugins by this author: Sliding Cart for WooCommerce by FunnelKit - Skip Cart & Reach WooCommerce Checkout Faster, FunnelKit Payment Gateway for Stripe WooCommerce, FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce, SlingBlocks - Gutenberg Blocks by FunnelKit (Formerly WooFunnels), FunnelKit Payment Gateway with PayPal for WooCommerce, FunnelKit Payment Gateway for Square WooCommerce

Questions

Is FunnelKit still maintained?

Yes. Last release 3 Nov 2026, 107 releases in the last 24 months.

Who owns FunnelKit, and has it changed hands?

No change recorded. Main committer teamwoofunnels since Mar 2021.

Was FunnelKit removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is FunnelKit safe?

21 known vulnerabilities, all fixed (latest in 3.17.0). Not on the exploited list.

Is the latest FunnelKit update safe to install?

No ownership change before 3.18.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue