Aman FunnelKit Automations
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-39738 | ≤ 3.8.6.1 | WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-111411 | ≤ 3.8.5.2 | WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability | CRITICAL 9.3 | 0.3 % | ||
| CVE-2026-111841 | ≤ 3.8.5.2 | WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability | HIGH 8.8 | 0.1 % | ||
| CVE-2026-39450 | n/a – 3.7.3 | WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2025-49868 | ≤ 3.6.0 | WordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection Vulnerability | MEDIUM 4.7 | 0.2 % | ||
| CVE-2025-30795 | ≤ 3.5.1 | WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability | MEDIUM 4.7 | 0.4 % | ||
| CVE-2024-47328 | ≤ 3.1.2 | WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Inje… | HIGH 7.6 | 0.5 % |