amans2k vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 202510

Newest CVEs

• CVE-2025-14169

  FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.5 - Unauthenticated SQL Injection

  amans2k · FunnelKit – Funnel Builder for WooCommerce Checkout

  High7.5
• CVE-2025-12878

  FunnelKit – Funnel Builder for WooCommerce Checkout <= 3.13.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wfop_phone Shortcode

  amans2k · FunnelKit – Funnel Builder for WooCommerce Checkout

  Medium6.4
• CVE-2025-12469

  FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending

  amans2k · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

  Medium4.3
• CVE-2025-12468

  FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure

  amans2k · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

  Medium5.3
• CVE-2025-8607

  SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  amans2k · SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

  Medium6.4
• CVE-2025-7654

  Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library

  amans2k · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

  High8.8
• CVE-2025-6730

  Bonanza – WooCommerce Free Gifts Lite <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Opt In Success

  amans2k · Bonanza – WooCommerce Free Gifts Lite

  Medium4.3
• CVE-2025-1562

  Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation

  amans2k · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

  Critical9.8
• CVE-2025-2186

  Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'

  amans2k · FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

  High7.5
• CVE-2024-13675

  SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels) <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  amans2k · SlingBlocks – Gutenberg Blocks by FunnelKit (Formerly WooFunnels)

  Medium6.4