How severe is CVE-2026-13080?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Vulnerability in Getwpfunnels Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell

CVE-2026-13080

The WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.12.7 via the 'logKey' parameter parameter. This makes it pos…

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Getwpfunnels Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell — versions 0

Weakness classification (CWE)

CWE-98 — PHP Remote File Inclusion

References

Frequently asked questions

What is CVE-2026-13080?: CVE-2026-13080 is a medium-severity vulnerability in Getwpfunnels Wpfunnels – Funnel Builder For Woocommerce With Checkout & One Click Upsell, classified under PHP Remote File Inclusion. CVSS score: 6.6/10. Published 2026-07-09.
How severe is CVE-2026-13080?: Medium severity. CVSS v3 base score is 6.6 out of 10.