WordPress security by component

Woo One Click Upsell Funnel

Plugin description

Woo One Click Upsell Funnel is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 21, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: woo-one-click-upsell-funnel

Latest vulnerability

CVE-2024-11938: Woo One Click Upsell Funnel: Cross-site scripting

Woo One Click Upsell Funnel is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 21, 2024

Safe version guidanceSee mitigation notes

		Safe version
Dec 21, 2024	CVE-2024-11938 Woo One Click Upsell Funnel: Cross-site scripting Woo One Click Upsell Funnel is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending