Skip to content
OpenAdvisories

Vendor

Aman

18 known vulnerabilities.

Products

FunnelKit Automations 7 Funnel Builder by FunnelKit 4 CF7 Views – Complete Entry Management for Contact Form 7 3 Popup addon for Ninja Forms 2 Views for WPForms 1 Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.8
    CVE-2026-111841

    WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.

    Aman FunnelKit Automations
  • High 7.1
    CVE-2026-40807

    WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in CF7 Views &#8211; Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

    Aman CF7 Views &#8211; Complete Entry Management for Contact Form 7
  • High 7.1
    CVE-2026-57411

    WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views &#8211; Complete Entry Management for Contact Form 7 cf7-views allows DOM-Based XSS.This issue affects CF7 Views &#8211; Complete Entry Manage…

    Aman CF7 Views &#8211; Complete Entry Management for Contact Form 7
  • High 7.1
    CVE-2026-39450

    WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability

    Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

    Aman FunnelKit Automations
  • High 8.5
    CVE-2026-42741

    WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views &#8211; Display &amp; Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue a…

    Aman Ninja Forms Views &#8211; Display &amp; Edit Ninja Forms Submissions on your site frontend
  • High 8.5
    CVE-2026-42742

    WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6.

    Aman Views for WPForms
  • High 7.5
    CVE-2025-54750

    WordPress Funnel Builder by FunnelKit Plugin <= 3.11.1 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects Funnel Builder by FunnelKit: from n/a t…

    Aman Funnel Builder by FunnelKit
  • High 7.6
    CVE-2025-49034

    WordPress Funnel Builder by FunnelKit plugin <= 3.10.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows SQL Injection.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.10.2.

    Aman Funnel Builder by FunnelKit
  • High 7.5
    CVE-2025-26979

    WordPress Funnel Builder by FunnelKit plugin <= 3.9.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows PHP Local File Inclusion.This issue affects Funnel Builder by FunnelKit: from n/a t…

    Aman Funnel Builder by FunnelKit
  • High 7.6
    CVE-2024-47328

    WordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows SQL Injection.This issue affects FunnelKit Automations: from n/a through <= 3.1.2.

    Aman FunnelKit Automations