What is GHSA-j565-xvv2-774h?

GHSA-j565-xvv2-774h is a security advisory published by GitHub Security Advisories with Medium severity. The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through...

Which CVE IDs does GHSA-j565-xvv2-774h cover?

GHSA-j565-xvv2-774h covers the following CVE IDs: CVE-2026-79630. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j565-xvv2-774h?

GHSA-j565-xvv2-774h has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-j565-xvv2-774hMediumCVSS 5.3

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-79630 →

📋 Description

The WPFunnels WordPress plugin before 3.13.0 does not verify that the product requested through a checkout order bump is the product that bump's discount was configured for, allowing unauthenticated users to obtain any purchasable product at a discount intended for a different one, with the reduced price carried through to the total of the order they place.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-79630
https://wpscan.com/vulnerability/fb49c59a-f79f-495c-a23e-0e1629cfa53e
https://github.com/advisories/GHSA-j565-xvv2-774h