CVE-2026-111411
WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The FunnelKit Automations plugin for WordPress is affected by this flaw, which is a SQL injection issue. An attacker could exploit it to run blind SQL queries against the site's database, potentially reading or manipulating sensitive data.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.
Affected versions
- wp-marketing-automations
through 3.8.5.2