Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

amans2k — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting amans2k. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Amans2k is a security researcher primarily focused on identifying vulnerabilities in web applications and enterprise software, with 12 CVEs recorded to date. Common vulnerability classes discovered include remote code execution, cross-site scripting, and privilege escalation flaws. The researcher has demonstrated particular expertise in identifying authentication bypasses and insecure direct object references in widely-used platforms. While no major public security incidents are directly attributed to this researcher, their contributions to vulnerability disclosure have helped address critical flaws in multiple systems. Amans2k's work typically follows responsible disclosure practices, coordinating with vendors to remediate issues before public release.

Found 5 results / 12 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2025-12469 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-862 4.3 Medium 2025-11-05
CVE-2025-12468 FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-200 5.3 Medium 2025-11-05
CVE-2025-7654 Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-200 8.8 High 2025-08-19
CVE-2025-1562 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-862 9.8 Critical 2025-06-18
CVE-2025-2186 Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId' — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-89 7.5 High 2025-03-22

This page lists every published CVE security advisory associated with amans2k. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.