Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Aman — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting Aman. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Aman primarily develops web applications and APIs for enterprise clients, with a core focus on e-commerce platforms. Historically, vulnerabilities associated with this developer include multiple remote code execution flaws, cross-site scripting (XSS) issues, and privilege escalation weaknesses, often stemming from improper input validation and insecure authentication mechanisms. Security assessments reveal inconsistent patch management and insufficient dependency updates. While no major public breaches have been directly attributed to Aman's code, the consistent pattern of similar vulnerability types across multiple projects suggests systemic security gaps in development practices, requiring improved secure coding training and regular security reviews.

CVE ID Title CVSS Severity Published
CVE-2026-100513 WordPress CF7 Views &#8211; Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability — CF7 Views &#8211; Complete Entry Management for Contact Form 7 CWE-79 6.5 Medium 2026-09-30
CVE-2026-57411 WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability — CF7 Views &#8211; Complete Entry Management for Contact Form 7 CWE-79 7.1 High 2026-07-13
CVE-2026-39450 WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability — FunnelKit Automations CWE-288 7.1 High 2026-06-15
CVE-2026-42742 WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability — Views for WPForms CWE-89 8.5 High 2026-05-12
CVE-2026-42741 WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability — Ninja Forms Views &#8211; Display &amp; Edit Ninja Forms Submissions on your site frontend CWE-89 8.5 High 2026-05-12
CVE-2025-66067 WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability — Funnel Builder by FunnelKit CWE-79 6.5 Medium 2025-11-21
CVE-2025-64264 WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability — Popup addon for Ninja Forms CWE-79 5.9 Medium 2025-11-13
CVE-2025-54750 WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability — Funnel Builder by FunnelKit CWE-98 7.5 High 2025-08-20
CVE-2025-49034 WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability — Funnel Builder by FunnelKit CWE-89 7.6 High 2025-07-16
CVE-2025-53279 WordPress Popup addon for Ninja Forms plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability — Popup addon for Ninja Forms CWE-79 6.5 Medium 2025-06-27
CVE-2025-49868 WordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection Vulnerability — FunnelKit Automations CWE-601 4.7 Medium 2025-06-17
CVE-2025-30795 WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability — FunnelKit Automations CWE-601 4.7 Medium 2025-03-27
CVE-2025-26979 WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability — Funnel Builder by FunnelKit CWE-98 7.5 High 2025-02-25
CVE-2024-47328 WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability — FunnelKit Automations CWE-89 7.6 High 2024-10-21

This page lists every published CVE security advisory associated with Aman. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.