FunnelKit – Funnel Builder Plugin for WooCommerce Checkout

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

486 searches this plugin appeared in over the last 90 days, 20 listed. 391 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 5 months ago; a band this size takes about a year or more to cross, which places it about 57% of the way through.

1. ★★★★★ ball999

   3mo ago

   Great service from Harish Bajaj / FunnelKit. The plugin works well and helps our business a lot. Thanks.

   Read on wp.org ↗
2. ★★★★★ viacoo

   4mo ago

   Harish was the best. He searched high and low to solve the problem. And the plugin is fantastic. I recommend it.

   Read on wp.org ↗
3. ★★★★★ 11AFotografie

   4mo ago

   I got great 1:1 support, even within 24 hours, while still using the free version of this plugin! That’s really costumer service, specially in this day and age!

   Read on wp.org ↗
4. ★★★★★ sangemaru

   4mo ago

   My agency has been a long-time (4+ years) customer of the FunnelKit Builder which we are recommending to all our clients. The funnelkit team has been providing excellent features and top-notch customer support.

   Read on wp.org ↗
5. ★★★★★ marinov96

   5mo ago

   I had a technical issue with the Checkout Form inside the Divi editor. The support team responded instantly, identified a bug on their end, and deployed a fix within just a few hours. Amazing professionalism and a fantastic product. 5 stars!

   Read on wp.org ↗
6. ★★★★★ thebrunomaya

   5mo ago

   Funnelkit became our to-go solution for WordPress and WooCommerce when it comes to Cart, Funnel Design and Automations/Emails. Even though there are many solutions out there, this suite’s speed and ease of use is unmatched. It is a great suite. As every thing in wordpress, sometimes you need support, and this is where they shine the most. This is the main reason we’ve been loyal users for years already. WTG, FK team!

   Read on wp.org ↗
7. ★★★★★ idrianoo

   5mo ago

   Thanks supporting team for quick response and immediate action to solve my problem . You are the Best 👌 👌👌

   Read on wp.org ↗
8. ★★★★★ gcosoftware

   5mo ago

   In my opinion it only works after hours of senior-level work. This is not “plug and play”.   I deployed FunnelKit as the checkout for a WooCommerce store. Yes, it has nice templates — but that’s where the upsides end. To get anything to actually work correctly, I had to manually work around a dozen-plus bugs. Specifically:        – The “Place order” button doesn’t show up without custom CSS — the plugin hides its own payment section and never reveals it. – A postcode marked “not required” still blocks the order (server-side validation ignores the UI setting) — fixing it requires PHP code. – The “Page Layout: Theme” setting in the UI simply doesn’t work — the header and footer disappear, and the only way to fix it is editing the database directly. – Exporting/importing a funnel between instances breaks editability — after import you can’t open the step in Elementor (“the content area was not found”); you have to rebuild everything by hand on production. If you were counting on a dev→production workflow, that’s a dealbreaker. – The default configuration triggers 502 errors on a typical nginx setup (a cookie storing the full price HTML overflows the buffers). – Cart message translations don’t work out of the box (wrong text domain) — they stay in English despite correct translations. – The form needs manual CSS to remove empty gaps and align the step bar — the visual panel isn’t enough. My WPstack runs on PHP8.4 so it is NOT old scrap, this plugin should works as other, but it takes one working day on making it usable. Bottom line: if you don’t have work experience with toptiers AI coding assist or you’re not a senior developer comfortable with PHP, CSS, nginx, and WordPress internals — you will not manage this plugin. From that perspective it looks like a half-finished product: a few pretty templates don’t make up for the lack of basic reliability. The whole point of a checkout plugin should be “it just works” — and that isn’t the case here. Disclaimer: I didn’t buy pay version, I’ve used and managed only free version, maybe in pay ver. works well. This topic was modified 1 month ago by gcosoftware. Reason: correct in number of stars rating

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.15.0.9 Improved: Checkout: Improved compatibility with WooCommerce PayPal Payments. (#8885) Improved: Funnel: Improved compatibility with Bricks Builder. (#9174) Improved: Checkout: Streamlined the admin experience by removing 3.15.0.9
2. — Version 3.15.0.8 Improved: Enhanced overall stability and reliability across the plugin. Improved: Funnel: Compatibility with divi5 related to Thankyou page CSS. (#9161) 3.15.0.8
3. — Version 3.15.0.7 Fixed: Funnel: Admin UI canvas mode was not showing funnel steps. 3.15.0.7
4. — Version 3.15.0.6 Improved: Compatibility with PHP version 8.4.x. (#9140) Improved: Funnel: Conversion analytics to handle edge cases of retrying orders with no funnel ID multiple times. (#9044) Improved: Funnel: Hardened the security of 3.15.0.6
5. — Version 3.15.0.5 Improved: Checkout: Compatibility with MercadoPago Gateway improved. (#8783) 3.15.0.5
6. — Version 3.15.0.4 Improved: Checkout: Compatibility with CookieYes plugin improved to fix the PHP warning. (#8932) 3.15.0.4

All 21 disclosed vulnerabilities are patched in the current version (3.17.0.1). Sites still on an older version should update.

1. Patched High · 7.5 FunnelKit <= 3.16.0.6 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order_id' / 'order' POST Parameter ↗
   2026-10-15 CVE-2026-107746 Missing Authorization Affects <= 3.16.0.6 Patched in 3.17.0
2. Patched High · 7.2 FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing) ↗
   2026-10-09 CVE-2026-100147 Improper Neutralization of Input During Web Page Generation Affects <= 3.16.0.5 Patched in 3.16.0.6
3. Patched High · 7.2 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.8 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-10 CVE-2026-57816 Improper Neutralization of Input During Web Page Generation Affects <= 3.15.0.8 Patched in 3.15.0.9
4. Patched Medium · 6.5 FunnelKit <= 3.15.0.5 - Authenticated (Admin+) Arbitrary File Deletion ↗
   2026-06-25 CVE-2026-12979 External Control of File Name or Path Affects <= 3.15.0.5 Patched in 3.15.0.6
5. Patched Medium · 6.1 FunnelKit <= 3.15.0.5 - Reflected Cross-Site Scripting ↗
   2026-06-25 CVE-2026-12978 Improper Neutralization of Input During Web Page Generation Affects <= 3.15.0.5 Patched in 3.15.0.6
6. Patched Medium · 4.9 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.5 - Authenticated (Administrator+) SQL Injection ↗
   2026-06-24 CVE-2026-56052 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.15.0.5 Patched in 3.15.0.6
7. Patched High · 7.2 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-03 CVE-2026-48966 Improper Neutralization of Input During Web Page Generation Affects <= 3.15.0.2 Patched in 3.15.0.3
8. Patched Medium · 5.3 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.2 - Missing Authorization ↗
   2026-05-19 CVE-2026-47100 Missing Authorization Affects <= 3.15.0.2 Patched in 3.15.0.3
9. Patched High · 7.5 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.15.0.1 - Unauthenticated SQL Injection ↗
   2026-04-27 CVE-2026-42381 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.15.0.1 Patched in 3.15.0.2
10. Patched High · 7.5 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection ↗
    2025-12-11 CVE-2025-14169 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.13.1.5 Patched in 3.13.1.6
11. Patched Medium · 6.4 Funnel Builder by FunnelKit <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-12-06 CVE-2025-66067 Improper Neutralization of Input During Web Page Generation Affects <= 3.13.1.2 Patched in 3.13.1.3
12. Patched Medium · 6.4 FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode ↗
    2025-11-18 CVE-2025-12878 Improper Neutralization of Input During Web Page Generation Affects <= 3.13.1.2 Patched in 3.13.1.3
13. Patched Medium · 6.1 FunnelKit <= 3.12.0 - Reflected Cross-Site Scripting ↗
    2025-10-15 CVE-2025-10567 Improper Neutralization of Input During Web Page Generation Affects <= 3.12.0 Patched in 3.12.0.1
14. Patched High · 8.1 Funnel Builder by FunnelKit <= 3.11.1 - Unauthenticated Local File Inclusion ↗
    2025-08-19 CVE-2025-54750 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 3.11.1 Patched in 3.12.0
15. Patched High · 8.8 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library ↗
    2025-08-18 CVE-2025-7654 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.11.0.2 Patched in 3.11.1
16. Patched Medium · 4.9 Funnel Builder by FunnelKit <= 3.10.2 - Authenticated (Administrator+) SQL Injection ↗
    2025-07-08 CVE-2025-49034 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.10.2 Patched in 3.11.0
17. Patched Medium · 4.9 Funnel Builder for WordPress by FunnelKit <= 3.10.1 - Authenticated (Administrator+) SQL Injection ↗
    2025-04-07 CVE-2025-2203 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.10.1 Patched in 3.10.2
18. Patched Critical · 9.8 Funnel Builder by FunnelKit <= 3.9.0 - Unauthenticated Local File Inclusion ↗
    2025-02-23 CVE-2025-26979 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 3.9.0 Patched in 3.9.1
19. Patched Medium · 4.3 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+) Settings Update ↗
    2024-07-23 CVE-2024-6836 Missing Authorization Affects <= 3.4.6 Patched in 3.4.7
20. Patched Medium · 6.4 Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload ↗
    2024-06-28 CVE-2024-5192 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.1 Patched in 3.4.0
21. Patched Medium · 6.6 Funnel Builder for WordPress by FunnelKit <= 2.14.3 - Authenticated(Administrator+) SQL Injection ↗
    2023-12-21 CVE-2023-50856 Improper Neutralization of Special Elements used in an SQL Command Affects < 2.14.4 Patched in 2.14.4

Translated into 9 languages, 2 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-28 40K+ → 30K+ down after 110 days in tier
2. 2026-02-07 30K+ → 40K+ up after 2 days in tier
3. 2026-02-05 40K+ → 30K+ down after 5 days in tier
4. 2026-01-31 30K+ → 40K+ up after 2 days in tier
5. 2026-01-29 40K+ → 30K+ down after 83 days in tier
6. 2025-11-07 30K+ → 40K+ up after 386 days in tier
7. 2024-10-17 20K+ → 30K+ up after 377 days in tier
8. 2023-10-06 10K+ → 20K+ up after 369 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for FunnelKit – Funnel Builder Plugin for WooCommerce Checkout into a readme, a review or a deck. It updates itself.

FunnelKit – Funnel Builder Plugin for WooCommerce Checkout: 30K+ active installs, 5.0★ (1,028 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/funnel-builder