Funnelkit Funnelkit Automations — known CVE vulnerabilities

Every CVE whose affected-product data names Funnelkit Funnelkit Automations, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-1562 — CVSS 9.8 (critical): The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable…
• CVE-2024-9186 — CVSS 8.6 (high): The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does…
• CVE-2024-47328 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations…
• CVE-2023-50857 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart…
• CVE-2025-12468 — CVSS 5.3 (medium): The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to…
• CVE-2022-2389 — CVSS 4.3 (medium): The Abandoned Cart Recovery for WooCommerce, Follow Up Emails, Newsletter Builder & Marketing Automation By Autonami WordPress plugin…
• CVE-2025-12469 — CVSS 4.3 (medium): The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPress is vulnerable to Missing…