Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-111411 EUVD-2026-112065GHSA-xxrj-fj77-w6c3

WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.

Affected products

VendorProductAffectedFixed
Aman FunnelKit Automations ≤ 3.8.5.2 —

References