CVE-2025-30772

Summary

CVE-2025-30772 is a critical vulnerability affecting the WPClever WPC Smart Upsell Funnel plugin for WooCommerce. The issue, a Missing Authorization flaw, enables Privilege Escalation, allowing unauthorized users to gain higher access levels within the plugin. This vulnerability exists in versions of WPC Smart Upsell Funnel for WooCommerce from the initial release through 3.0.4. Successful exploitation could result in significant security implications for affected WordPress sites. Users are urged to update to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.