Funnel Builder Plugin WooCommerce Checkout Skimming | MSSP Advisory

The Funnel Builder plugin for WordPress contains a critical security vulnerability being actively exploited to inject malicious JavaScript into WooCommerce checkout pages and steal payment data. Attackers are targeting sites running this plugin to deploy checkout skimmers that harvest customer credit card information during the payment process.

Your WordPress management tools and client sites running WooCommerce with Funnel Builder are direct targets for credit card theft operations. When payment data gets stolen from client ecommerce sites, you face immediate liability questions about your monitoring and patch management while clients lose revenue and trust during breach response.

📬