All products

wp-marketing-automations

WordPress · Plugin
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.6.1 - Unauthenticated PHP Object InjectionCVE-2026-39738 wp-marketing-automations WordPress High Fix reported
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.5.2 - Unauthenticated SQL InjectionCVE-2026-111411 wp-marketing-automations WordPress High Fix reported
FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' ParameterCVE-2026-119163 wp-marketing-automations WordPress High Fix reported
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.5.2 - Cross-Site Request ForgeryCVE-2026-111841 wp-marketing-automations WordPress Medium Fix reported
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.7.3 - Missing AuthorizationCVE-2026-39450 wp-marketing-automations WordPress Medium Fix reported
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email SendingCVE-2025-12469 wp-marketing-automations WordPress Medium Fix reported
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information ExposureCVE-2025-12468 wp-marketing-automations WordPress Medium Fix reported
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel LibraryCVE-2025-7654 funnel-builderwp-marketing-automations WordPress High Fix reported
Automation By Autonami <= 3.6.0 - Open RedirectCVE-2025-49868 wp-marketing-automations WordPress Medium Fix reported
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin InstallationCVE-2025-1562 wp-marketing-automations WordPress Critical Fix reported
Automation By Autonami <= 3.5.1 - Open RedirectCVE-2025-30795 wp-marketing-automations WordPress High Fix reported
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'CVE-2025-2186 wp-marketing-automations WordPress High Fix reported
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.2.2 - Unauthenticated SQL InjectionCVE-2024-9186 wp-marketing-automations WordPress High Fix reported
Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL InjectionCVE-2024-47328 wp-marketing-automations WordPress Medium Fix reported
Automation By Autonami <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-2580 wp-marketing-automations WordPress Medium Fix reported
Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL InjectionCVE-2023-50857 wp-marketing-automations WordPress Medium Fix reported
Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing AuthorizationCVE-2022-2389 wp-marketing-automations WordPress Medium Fix reported