Amans2k vulnerabilities
We track 4 vulnerabilities in Amans2k products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 12, 2025.
Latest Amans2k vulnerabilities
- 7.5 High severity
FunnelKit – Funnel Builder for WooCommerce…: Improper Neutralization of Special Elements used in an SQL Command
The FunnelKit - Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'opid' parameter in all versions up to, and including, 3.13.1.5 due to insufficient escaping on the user supplied parameter and
- 8.8 High severity
FunnelKit Automations – Email Marketing…: Exposure of Sensitive Information to an Unauthorized Actor
Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies
- 9.8 Critical severity
FunnelKit Automations – Email Marketing…: Missing Authorization
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins
- 7.5 High severity
FunnelKit Automations – Email Marketing…: Improper Neutralization of Special Elements used in an SQL Command
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escapi