FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce vulnerabilities
3 known vulnerabilities in FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce from Amans2k. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
FunnelKit Automations – Email Marketing…: Exposure of Sensitive Information to an Unauthorized Actor
Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including authentication cookies
- 9.8 Critical severity
FunnelKit Automations – Email Marketing…: Missing Authorization
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins
- 7.5 High severity
FunnelKit Automations – Email Marketing…: Improper Neutralization of Special Elements used in an SQL Command
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to SQL Injection via the ‘automationId’ parameter in all versions up to, and including, 3.5.1 due to insufficient escapi