CVE · High

CVE-2026-96837 — CartFlows – Funnel Builder & Checkout Plugin for WooCommerce [cartflows] < 3.2.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-96837 CartFlows – Funnel Builder & Checkout Plugin for WooCommerce [cartflows] < 3.2.1 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') High 8.8 < 3.2.1 3.2.1 2026-03-27 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.