Read the docs

Aman

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Aman records in CISA KEV

No Aman vulnerabilities are listed in CISA KEV.

Records

17 records

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2026-10-30 No fix listed CWE-502
Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automation…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00342 Published 2026-10-28 No fix listed CWE-89
Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0013 Published 2026-10-26 No fix listed CWE-352
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00223 Published 2026-05-12 No fix listed CWE-89
Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00223 Published 2026-05-12 No fix listed CWE-89
Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit: f…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00338 Published 2025-07-16 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-07-13 No fix listed CWE-79
Priority LOW 30

Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-06 No fix listed CWE-79
Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0021 Published 2025-11-21 No fix listed CWE-79
Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows DOM-Based XSS.This issue affects Popup addon for N…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninj…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00177 Published 2025-11-13 No fix listed CWE-79
Priority LOW 22

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects FunnelKit Automations: from n/a through <= 3.5.1.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00402 Published 2025-03-27 No fix listed CWE-601
Priority LOW 21

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects FunnelKit Automations: from n/a through <= 3.6.0.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00232 Published 2025-06-17 No fix listed CWE-601
Open these records in search →