Skip to content
Amans2k vulnerabilities
Newest
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce
FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter
CVE-2026-119163
7.5 High
-
amans2k funnelkit – funnel builder for woocommerce checkout
FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing)
CVE-2026-100147
7.2 High
-
amans2k funnelkit – funnel builder for woocommerce checkout
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection
CVE-2025-14169
7.5 High
-
amans2k funnelkit – funnel builder for woocommerce checkout
FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode
CVE-2025-12878
6.4 Medium
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
CVE-2025-12469
4.3 Medium
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more
FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure
CVE-2025-12468
5.3 Medium
-
amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels)
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-8607
6.4 Medium
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit – funnel builder for woocommerce checkout +1 more
Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library
CVE-2025-7654
8.8 High
-
amans2k bonanza – woocommerce free gifts lite
Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success
CVE-2025-6730
4.3 Medium
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce, funnelkit automations +1 more
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation
CVE-2025-1562
Public exploit
9.8 Critical
-
amans2k funnelkit automations – email marketing automation and crm for wordpress & woocommerce
Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'
CVE-2025-2186
7.5 High
-
amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels), funnelkit slingblocks +1 more
SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13675
6.4 Medium
-
funnelkit funnel builder, amans2k funnelkit – funnel builder for woocommerce checkout +1 more
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.4.6 - Missing Authorization to Authenticated (Contributor+)…
CVE-2024-6836
4.3 Medium
-
amans2k slingblocks – gutenberg blocks by funnelkit (formerly woofunnels)
WordPress SlingBlocks plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38684
6.5 Medium
-
funnelkit funnel builder, amans2k funnelkit – funnel builder for woocommerce checkout +1 more
Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells <= 3.3.1 - Authenticated (Author+) Stored Cross-Site Scripting v…
CVE-2024-5192
6.4 Medium