8.8
High
CVE-2026-111841 Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site…
Description
Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FunnelKit Automations 3.8 | earliest → 3.8.5.2 | No fix stated |
Other CVEs of FunnelKit Automations
The 7 CVEs of FunnelKit Automations →
CVE-2026-39738
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object…
9.8
Critical
CVE-2026-111411
WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability
9.3
Critical
CVE-2026-39450
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions
7.1
High
CVE-2025-49868
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations…
4.7
Medium