Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: amans2k

CVE IDTitleCVSSSeverityPublished
CVE-2025-12469 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending CWE-862 4.3 Medium2025-11-05
CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure CWE-200 5.3 Medium2025-11-05
CVE-2025-7654 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library CWE-200 8.8 High2025-08-19
CVE-2025-1562 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation CWE-862 9.8 Critical2025-06-18
CVE-2025-2186 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' CWE-89 7.5 High2025-03-22

All 5 known CVE vulnerabilities affecting FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce with full Chinese analysis, references, and POCs where available.