9.8
Critical
CVE-2026-39738 Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object…
Description
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue affects FunnelKit Automations: from n/a through 3.8.6.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FunnelKit Automations 3.8 | earliest → 3.8.6.1 | No fix stated |
| FunnelKit Automations 3.8 | earliest → 3.8.6.1 | No fix stated |