159 matches found
Automation By Autonami < 3.3.0 - SQL Injection
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks. id:...
VulnCheck KEV: CVE-2026-39738
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...
CVE-2026-119163
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
CVE-2026-119163
The FunnelKit Automations plugin for WordPress & WooCommerce (versions up to and including 3.8.5.2 ) is vulnerable to a time-based SQL Injection via the bwfan_cart_id parameter. The root cause is insufficient escaping of user-supplied parameters and a lack of preparation in existing SQL queries. ...
CVE-2026-119163 FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
CVE-2026-119163 FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
EUVD-2026-114595
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
CVE-2026-119163: teamfunnelkit FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce: The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is…
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfancartid' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
PT-2026-134457
The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'bwfan cart id' parameter in all versions up to, and including, 3.8.5.2 due to insufficient escaping on the user supplied parameter and...
CVE-2026-39738
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...
EUVD-2026-114288
Unauthenticated PHP Object Injection in FunnelKit Automations = 3.8.6.1 versions...
CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...
CVE-2026-39738 WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...
CVE-2026-39738
The FunnelKit Automations plugin for WordPress versions
WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Dexx-tech in WordPress Plugin FunnelKit Automations versions = 3.8.6.1...
PT-2026-133778
Name of the Vulnerable Software and Affected Versions FunnelKit Automations versions prior to 3.8.6.2 Description An unauthenticated attacker can send crafted serialized data to the application, leading to PHP Object Injection. This issue may allow for remote code execution or data tampering...
CVE-2026-39738: Aman FunnelKit Automations: Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object…
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1...
frangoteam FUXA /api/runscript authorization bypass vulnerability
Summary A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA versions: 1.3.2-2809. A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Confirmed Vulnerabl...
CVE-2026-111411
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automations: from n/a through 3.8.5.2...