What’s Vulnerable › Products
amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Latest amans2k FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce vulnerabilities
- CVE-2026-39738 — WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability (CVSS 9.8)
- CVE-2026-111411 — WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-111841 — WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- CVE-2026-39450 — WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability (CVSS 7.1)
- CVE-2025-12469 — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending (CVSS 4.3)
- CVE-2025-12468 — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure (CVSS 5.3)
- CVE-2025-7654 — Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library (CVSS 8.8)
- CVE-2025-1562 — Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation (CVSS 9.8)
- CVE-2025-49868 — WordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection Vulnerability (CVSS 4.7)
- CVE-2025-30795 — WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability (CVSS 4.7)
- CVE-2025-2186 — Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' (CVSS 7.5)
- CVE-2024-9186 — Automation By Autonami < 3.3.0 - Unauthenticated SQLi (CVSS 8.6)
- CVE-2024-47328 — WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability (CVSS 7.2)
- CVE-2023-50857 — WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection (CVSS 7.2)
- CVE-2022-2389 — Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation (CVSS 4.3)