Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/03/24 1:19 p.m.•39 views

CVE-2025-2186

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS7.9AI score0.00445EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 8:44 a.m.•23 views

WordPress Automation By Autonami plugin <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' vulnerability

Unauthenticated SQL Injection via 'automationId' vulnerability discovered by mikemyers in WordPress Plugin FunnelKit Automations versions = 3.5.1...

7.5CVSS9.5AI score0.00445EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/03/22 1:15 p.m.•30 views

CVE-2025-2186

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS0.00445EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/22 12:42 p.m.•22 views

CVE-2025-2186 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS7.8AI score0.00445EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/22 12:00 a.m.•4 views

CVE-2025-2186: Improper Neutralization of Special Elements used in an SQL Command

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS5.7AI score0.00445EPSS
SaveExploits0References1
Rows per page
Query Builder