Read the docs

FunnelKit

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

FunnelKit records in CISA KEV

No FunnelKit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Funnelkit Automations 7 records HIGH Funnel Builder 5 records HIGH Funnelkit Checkout 2 records LOW Slingblocks 1 record LOW

Records

7 records in Funnelkit Automations · all components

TI-2024-08524 CVE-2024-9186 · GHSA-v5rm-528g-7mvp

Automation By Autonami < 3.3.0 - Unauthenticated SQLi

Priority HIGH 76

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL st…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02272 Published 2024-11-14 Fixed in 3.3.0 CWE-89
TI-2025-01346 CVE-2025-1562 · GHSA-rr4m-6xx9-f2wg

Missing authorization in FunnelKit Automations – Email Marketing Automation and CRM for…

Priority MEDIUM 55

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03345 Published 2025-06-18 No fix listed CWE-862
TI-2024-31646 CVE-2024-47328 · GHSA-p569-g85j-mmj8

SQL injection in Aman FunnelKit Automations

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows SQL Injection.This issue affects FunnelKit Automations: fro…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00494 Published 2024-10-21 No fix listed CWE-89
TI-2023-27762 CVE-2023-50857 · GHSA-4m45-v7m2-3276

WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This is…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-28 No fix listed CWE-89
TI-2025-11440 CVE-2025-12468 · GHSA-w6ph-hrmj-vffx

Information disclosure in FunnelKit Automations – Email Marketing Automation and CRM for…

Priority LOW 30

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-c…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00368 Published 2025-11-05 No fix listed CWE-200
TI-2022-02205 CVE-2022-2389 · GHSA-7wc7-7jf5-q238

Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation

Priority LOW 20

The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, al…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00364 Published 2022-08-22 Fixed in 2.1.2 CWE-352
Open these records in search →