High · 7.1 CVE-2026-39450 EUVD-2026-36929GHSA-cpw9-rv4g-g54v

WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability

Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack

Vendor: Aman Product: FunnelKit Automations

Description

Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

Affected products

Vendor	Product	Affected	Fixed
Aman	FunnelKit Automations	≤ 3.7.3	—

References

https://patchstack.com/database/wordpress/plugin/wp-marketing-automations/vulnerability/wordpress-funnelkit-automations-plugin-3-7-3-broken-authentication-vulnerability?_s_id=cve vdb-entry