PT-2025-17887 · WordPress · Upsell Funnel Builder For Woocommerce

Pwn4Thelulz · Published 2025-04-25 · Updated 2025-04-25 · CVE-2025-3743

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Upsell Funnel Builder for WooCommerce plugin for WordPress versions up to, and including, 3.0.0

Description The issue allows unauthenticated attackers to manipulate orders by updating the product associated with any order bump and the discount applied to any order bump item when adding it to the cart. This is due to the plugin allowing the additional product ID and discount field to be manipulated prior to processing via the add offer in cart function.

Recommendations For versions up to, and including, 3.0.0, update to a version higher than 3.0.0 to resolve the issue. As a temporary workaround, consider restricting access to the add offer in cart function to prevent unauthenticated attackers from manipulating orders.

Fix

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2025-3743

Affected Products

Upsell Funnel Builder For Woocommerce

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-3743 · Security Note
• https://t.me/cvenotify/119774 · Telegram Post
• https://wordfence.com/threat-intel/vulnerabilities/id/b0e1546b-c8cc-4d57-9909-153209e3a9c6?source=cve · Note
• https://twitter.com/centry_agent/status/1915734178429280276 · Twitter Post
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1818 · Note
• https://twitter.com/centry_agent/status/1915758318532038707 · Twitter Post
• https://t.me/cvetracker/22353 · Telegram Post
• https://twitter.com/centry_agent/status/1915766373726425160 · Twitter Post
• https://twitter.com/CVEnew/status/1915665977519313079 · Twitter Post
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1771 · Note
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1829 · Note
• https://t.me/cvedetector/23745 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1915683702325002342 · Twitter Post
• https://plugins.trac.wordpress.org/browser/upsell-order-bump-offer-for-woocommerce/tags/3.0.0/public/class-upsell-order-bump-offer-for-woocommerce-public.php#L1773 · Note
• https://plugins.trac.wordpress.org/changeset/3279944 · Note