FunnelKit Automations vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FA

Product

FunnelKit Automations

by Aman · last CVE Oct 28, 2026

6

CVEs

0

On KEV

9.3

Max CVSS

2

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 3Medium 2Low 0

Severity

All severities6 Critical1 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add FunnelKit Automations to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-111411 New	9.3	–	Oct 28	WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability Affected: through 3.8.5.2
CVE-2026-111841 New	8.8	0%	Oct 26	WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 3.8.5.2
CVE-2024-47328	7.2	0%	Oct 21	WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability Affected: through 3.1.2
CVE-2026-39450	7.1	0%	Jun 15	WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability Affected: through 3.7.3
CVE-2025-49868	4.7	0%	Jun 17	WordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection Vulnerability Affected: through 3.6.0
CVE-2025-30795	4.7	0%	Mar 27	WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability Affected: through 3.5.1