funnelkit automations vulnerabilities and fixes
Recent CVEs affecting funnelkit automations, with upgrade or downgrade steps. 5 tracked.
Also searched as: funnelkitautomations.
funnelkit automations has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-11-05. Highest priority: CVE-2025-1562 (score 61/100).
- CVE-2025-12468 MEDIUM 5.3 UPGRADE The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPres
- CVE-2025-12469 MEDIUM 4.3 UPGRADE The FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce plugin for WordPres
- CVE-2025-1562 CRITICAL 9.8 UPGRADE The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugi
- CVE-2024-9186 HIGH 8.6 UPGRADE The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordP
- CVE-2024-47328 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Fun
FAQ
How do I fix funnelkit automations vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is funnelkit automations being exploited right now?
None of the tracked funnelkit automations CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which funnelkit automations CVE should I patch first?
CVE-2025-1562 currently ranks highest (61/100): The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugi.