Skip to content
PluginCanary

WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell

by WPFunnels · 5,000+ active installs · Checked 3 Nov 2026
Healthy13 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 3.13.6.

81/ 100 Canary Score
Sub-scores for WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 3.13.6. Update to version 3.13.6 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 3.13.6. Update to version 3.13.6 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 3.13.6. Update to version 3.13.6 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 3.13.6. Update to version 3.13.6 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 3.13.2. Update to version 3.13.2 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 3.13.2. Update to version 3.13.2 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 3.13.2. Update to version 3.13.2 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.8 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.3 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 2 Sep 2026, fixed in 3.13.0. Update to version 3.13.0 or later.2 Sep 2026Evidence
  • InfoSEC-323 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master25 Feb 2021 to 25 Feb 2021, 1 commits
getwpfunnels26 Feb 2021 to 3 Nov 2026, 458 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
78
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell
Q1 202416
Q2 202421
Q3 202415
Q4 20247
Q1 20259
Q2 20257
Q3 20255
Q4 20258
Q1 20268
Q2 202622
Q3 202610
Q4 20264

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

0% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.5 - Cross-Site Request Forgery4.3<= 3.13.53.13.60
29 Oct 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.5 - Missing Authorization5.3<= 3.13.53.13.60
29 Oct 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.5 - Missing Authorization5.3<= 3.13.53.13.60
9 Oct 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.13.53.13.619
1 Oct 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Insecure Direct Object Reference5.3<= 3.13.13.13.20
30 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.13.13.13.20
30 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.13.1 - Reflected Cross-Site Scripting6.1<= 3.13.13.13.20
8 Sep 2026WPFunnels <= 3.12.13 - Missing Authorization to Unauthenticated Arbitrary Product Price Manipulation via 'wpfnl_load_payment' AJAX Action5.3<= 3.12.133.13.00
4 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Information Exposure5.3< 3.13.03.13.00
4 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization5.3< 3.13.03.13.00
4 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Missing Authorization5.3< 3.13.03.13.00
3 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell <= 3.12.13 - Missing Authorization5.3<= 3.12.133.13.00
2 Sep 2026WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell < 3.13.0 - Unauthenticated Product Price Manipulation5.3< 3.13.03.13.00
15 Jul 2026WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter8.8<= 3.12.83.12.90
8 Jul 2026WPFunnels <= 3.12.7 - Authenticated (Administrator+) Local File Inclusion via 'logKey' Parameter6.6<= 3.12.73.12.80
6 Jul 2026WPFunnels <= 3.12.7 - Unauthenticated Remote Code Execution via 'postData' Parameter9.8<= 3.12.73.12.80
3 Apr 2026WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode6.4<= 3.7.93.8.00
15 Nov 2025WPFunnels <= 3.6.2 - Missing Authorization5.3<= 3.6.23.6.30
7 Nov 2025WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal6.5<= 3.6.23.6.30
7 Nov 2025WPFunnels <= 3.6.2 - Unauthorized User Registration5.3<= 3.6.23.6.30
30 Jul 2025WPFunnels <= 3.5.26 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.5.263.5.270
12 May 2025WPFunnels <= 3.5.18 - Unauthenticated PHP Object Injection9.8<= 3.5.183.5.190
20 Nov 2024Easiest Funnel Builder For WordPress & WooCommerce by WPFunnels <= 3.5.5 - Reflected Cross-Site Scripting6.1<= 3.5.53.5.60
13 Mar 2024WPFunnels <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 3.0.63.0.70
13 Jul 2023WPFunnels <= 2.7.16 - Reflected Cross-Site Scripting6.1<= 2.7.162.7.170

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 175 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star167
4 star5
3 star0
2 star1
1 star2

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell
4 May 20263,037
11 May 20266,756
18 May 20263,579
25 May 2026759
1 Jun 20262,972
8 Jun 2026811
15 Jun 20262,869
22 Jun 2026823
29 Jun 2026609
6 Jul 20263,609
13 Jul 20263,406
20 Jul 20263,106
27 Jul 2026856
3 Aug 20263,266
10 Aug 2026921
17 Aug 20265,292
24 Aug 20261,000
31 Aug 20263,828
7 Sep 2026908
14 Sep 20263,262
21 Sep 20263,079
28 Sep 20263,662
5 Oct 20261,396
12 Oct 20264,902
19 Oct 2026990
26 Oct 20263,680
2 Nov 2026173

Weekly downloads over the last 4 weeks are 5% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Modern Cart - WooCommerce Side Cart & Popup CartScore 93 · 60,000+Side Cart Woocommerce | Woocommerce CartScore 92 · 70,000+Sliding Cart for WooCommerce by FunnelKit - Skip Cart & Reach WooCommerce Checkout FasterScore 92 · 30,000+Quick Buy Now Button for WooCommerceScore 91 · 50,000+WPC AJAX Add to Cart for WooCommerceScore 91 · 10,000+

Facts

Version3.13.7
AuthorWPFunnels
Added26 Feb 2021
Last updated3 Nov 2026
Active installs5,000+
Requires WordPress6.1
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping > Product Management & Catalogs
Tagsorder bump, Funnel Builder, one click upsell, WooCommerce checkout, woocommerce funnel builder

Other plugins by this author: Mail Mint - Email Marketing, Automation & WooCommerce Emails with AI Assistance, Creator LMS - WordPress LMS Plugin for Coaches, Cohorts & Course Creators

Questions

Is WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell still maintained?

WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell safe?

WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell has no open unpatched vulnerabilities on record. 23 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell?

The wordpress.org author is WPFunnels. Recent committers: getwpfunnels, plugin-master. We have recorded no ownership change.

What can I use instead of WPFunnels - Funnel Builder for WooCommerce with Checkout & One Click Upsell?

Plugins in the same category with a higher Canary Score: Modern Cart - WooCommerce Side Cart & Popup Cart, Side Cart Woocommerce | Woocommerce Cart, Sliding Cart for WooCommerce by FunnelKit - Skip Cart & Reach WooCommerce Checkout Faster, Quick Buy Now Button for WooCommerce, WPC AJAX Add to Cart for WooCommerce.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue