WordPress Cartflows Vulnerabilities

Wordpress Cartflows vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

7 November 2026

Missing Authorization Vulnerability in CartFlows by Brainstorm Force
CVE-2026-120853
WordPressCartflows5.3MEDIUM
Cross-Site Scripting Flaw in CartFlows by Brainstorm Force
CVE-2026-120852
WordPressCartflows5.3MEDIUM

30 September 2026

Remote Code Execution Vulnerability in CartFlows by WordPress
CVE-2026-96837
WordPressCartflows8.8HIGH

8 April 2026

Authorization Flaw in Brainstorm Force CartFlows Affects Multiple Versions
CVE-2026-39477
WordPressCartflows4.3MEDIUM

19 February 2026

Object Injection Vulnerability in CartFlows by Brainstorm Force
CVE-2026-25316
WordPressCartflows7.2HIGH

19 June 2024

Stored Cross-Site Scripting Vulnerability in WooCommerce Checkout & Funnel Builder
CVE-2024-4632
WordPressCartflows – Funnel Bui...6.4MEDIUM

27 March 2024

Stored XSS Vulnerability in Funnel Builder by CartFlows
CVE-2024-29813
WordPressFunnel Builder By Cart...5.9MEDIUM

30 November 2023

WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-36685
WordPressCartflows Pro4.3MEDIUM

5 August 2023

WordPress CartFlows Pro Plugin <= 1.11.11 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-36686
WordPressCartflows Pro7.1HIGH

1 July 2023

Cross-Site Request Forgery Vulnerability in WooCommerce Checkout & Funnel Builder
CVE-2020-36736
WordPressCartflows – Funnel Bui...4.3MEDIUM

7 June 2023

Authorization Bypass Vulnerability in Funnel Builder Plugin for WordPress
CVE-2019-25151
WordPressCartflows – Funnel Bui...5.4MEDIUM

1 June 2021

Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics ID
CVE-2021-24330
WordpressFunnel Builder By Cart...4.8MEDIUM