CERT24Funnel Builder WordPress vulnerability exploited to skim WooCommerce checkout pagesLoading data…

Funnel Builder WordPress vulnerability exploited to skim WooCommerce checkout pages

A critical vulnerability in the Funnel Builder WordPress plugin was exploited to inject malicious JavaScript into WooCommerce checkout pages to steal payment data. The vulnerability affects plugin versions before 3.15.0.3. According to the source update, the active exploitation path is now closed.

← Back to intelligence

Funnel Builder WordPress vulnerability exploited to skim WooCommerce checkout pages

A critical vulnerability in the Funnel Builder WordPress plugin was exploited to inject malicious JavaScript into WooCommerce checkout pages to steal payment data. The vulnerability affects plugin versions before 3.15.0.3. According to the source update, the active exploitation path is now closed.