High · 7.6 CVE-2023-50857 EUVD-2023-55590GHSA-4m45-v7m2-3276

WordPress Automation By Autonami Plugin <= 2.6.1 is vulnerable to SQL Injection

Published Dec 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: FunnelKit Product: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit.This issue affects Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit: from n/a through 2.6.1.

Affected products

Vendor	Product	Affected	Fixed
FunnelKit	Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit	≤ 2.6.1	—

References

https://patchstack.com/database/vulnerability/wp-marketing-automations/wordpress-automation-by-funnelkit-plugin-2-6-1-sql-injection-vulnerability?_s_id=cve vdb-entry