7.1
High
CVE-2026-39450 Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions
Description
Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FunnelKit Automations 3.7 | earliest → 3.7.3 | No fix stated |
Other CVEs of FunnelKit Automations
The 7 CVEs of FunnelKit Automations →
CVE-2026-39738
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object…
9.8
Critical
CVE-2026-111411
WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability
9.3
Critical
CVE-2026-111841
Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site…
8.8
High
CVE-2025-49868
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations…
4.7
Medium