Funnelkit Automations vulnerabilities

3 known vulnerabilities in Funnelkit Automations from FunnelKit. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FunnelKit Automations – Email Marketing…: Missing Authorization

  CVE-2025-1562Jun 18, 2025Amans2kEPSS 3.38%

  The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the install_or_activate_addon_plugins

• 8.6 High severity

  Recover WooCommerce Cart Abandonment…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-9186Nov 14, 2024Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKitEPSS 2.27%

  The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL statement, allowing unauthenticated users

• 7.2 High severity

  Recover WooCommerce Cart Abandonment…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-50857Dec 28, 2023FunnelKit

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This issue affects Recover WooCommerce Cart Aba