Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/03/24 1:19 p.m.•44 views

CVE-2025-2186

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS8.3AI score0.00454EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 8:44 a.m.•26 views

WordPress Automation By Autonami plugin <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' vulnerability

Unauthenticated SQL Injection via 'automationId' vulnerability discovered by mikemyers in WordPress Plugin FunnelKit Automations versions = 3.5.1...

7.5CVSS8.5AI score0.00454EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/03/22 1:15 p.m.•35 views

CVE-2025-2186

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS0.00454EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/03/22 12:42 p.m.•25 views

CVE-2025-2186 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS8.2AI score0.00454EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/22 12:00 a.m.•13 views

PT-2025-12484

Name of the Vulnerable Software and Affected Versions Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit versions up to, and including, 3.5.1 Description The issue is related to SQL Injection via the automationId parameter due to insufficient...

7.5CVSS8.3AI score0.00454EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/22 12:00 a.m.•10 views

CVE-2025-2186: Improper Neutralization of Special Elements used in an SQL Command

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escaping on the user supplied parameter and...

7.5CVSS8.3AI score0.00454EPSS
SaveExploits0References1
Rows per page
Query Builder