Skip to content
Noroxi

CartFlows

cartflows · plugin

Known security vulnerabilities for CartFlows. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Sep 30, 2026

Vulnerabilities

  • CVE-2026-96837

    WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

    High 8.8

  • CVE-2026-25316

    WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability

    High 7.2

  • CVE-2024-4632

    WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scr

    Medium 6.4

  • CVE-2024-29813

    WordPress CartFlows plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2026-39477

    WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability

    Medium 4.3

  • CVE-2020-36736→ 1.5.16

    WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce <= 1.5.15 - Cross-Site Request Forgery Bypass

    Medium 4.3

← Back to directory