Plugin icon

FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

wp-marketing-automations

Vulnerabilities:

13

Last Updated:

April 9, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-04-22
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.8.0 - Missing Authorization
Fixed in
Fixed in 3.8.0
CVSS
4.3 (medium)
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 3.6.4.2
CVSS
5.3 (medium)
Published
2025-11-04
Title
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce < 3.6.4.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
Fixed in
Fixed in 3.6.4.2
CVSS
4.3 (medium)
Published
2025-08-18
Title
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
Fixed in
Fixed in 3.6.4
CVSS
8.8 (high)
Published
2025-06-17
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.6.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
Fixed in
Fixed in 3.6.0
CVSS
9.8 (critical)
Published
2025-06-12
Title
Automation By Autonami < 3.6.1 - Open Redirect
Fixed in
Fixed in 3.6.1
CVSS
6.1 (medium)
Published
2025-03-27
Title
Automation By Autonami < 3.5.2 - Open Redirect
Fixed in
Fixed in 3.5.2
CVSS
7.2 (high)
Published
2025-03-21
Title
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit < 3.5.2 - Unauthenticated SQL Injection via 'automationId'
Fixed in
Fixed in 3.5.2
CVSS
7.5 (high)
Published
2024-10-24
Title
Automation By Autonami < 3.3.0 - Unauthenticated SQLi
Fixed in
Fixed in 3.3.0
CVSS
8.6 (high)
Published
2024-09-25
Title
Automation By Autonami < 3.2.0 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 3.2.0
CVSS
4.9 (medium)
Published
2024-03-18
Title
Automation By Autonami < 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.8.3
CVSS
6.4 (medium)
Published
2023-12-21
Title
Automation By Autonami < 2.7.0 - Authenticated(Administrator+) SQL Injection
Fixed in
Fixed in 2.7.0
CVSS
6.6 (medium)
Published
2022-07-26
Title
Automations By Autonami < 2.1.2 - Subscriber+ Automation Creation
Fixed in
Fixed in 2.1.2
CVSS
4.3 (medium)