Skip to content

Known vulnerabilities in Aman FunnelKit Automations

Is your version affected?

CVE Summary Score Published
CVE-2026-39738 Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object… 9.8 Critical Oct 30, 2026
CVE-2026-111411 WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability 9.3 Critical Oct 28, 2026
CVE-2026-111841 Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site… 8.8 High Oct 26, 2026
CVE-2026-39450 Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions 7.1 High Jun 15, 2026
CVE-2025-49868 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations… 4.7 Medium Jun 17, 2025
CVE-2025-30795 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations… 4.7 Medium Mar 27, 2025
CVE-2024-47328 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit… 7.6 High Oct 21, 2024

Other Aman products