Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: FunnelKit Component: Funnelkit Automations Clear all filters
TI-2025-11440 CVE-2025-12468 · GHSA-w6ph-hrmj-vffx

Information disclosure in FunnelKit Automations – Email Marketing Automation and CRM for…

Priority LOW 30

The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.4.1 via the '/wc-c…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00368 Published 2025-11-05 No fix listed CWE-200
TI-2025-01346 CVE-2025-1562 · GHSA-rr4m-6xx9-f2wg

Missing authorization in FunnelKit Automations – Email Marketing Automation and CRM for…

Priority MEDIUM 55

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03345 Published 2025-06-18 No fix listed CWE-862
TI-2024-08524 CVE-2024-9186 · GHSA-v5rm-528g-7mvp

Automation By Autonami < 3.3.0 - Unauthenticated SQLi

Priority HIGH 76

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL st…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02272 Published 2024-11-14 Fixed in 3.3.0 CWE-89
TI-2024-31646 CVE-2024-47328 · GHSA-p569-g85j-mmj8

SQL injection in Aman FunnelKit Automations

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows SQL Injection.This issue affects FunnelKit Automations: fro…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00494 Published 2024-10-21 No fix listed CWE-89
TI-2023-27762 CVE-2023-50857 · GHSA-4m45-v7m2-3276

WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This is…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0053 Published 2023-12-28 No fix listed CWE-89
TI-2022-02205 CVE-2022-2389 · GHSA-7wc7-7jf5-q238

Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation

Priority LOW 20

The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin before 2.1.2 does not have authorisation and CSRF checks in one of its AJAX action, al…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00371 Published 2022-08-22 Fixed in 2.1.2 CWE-352