Approved changes feed: RSS · Atom

cpe:2.3:a:funnelkit:funnelkit_automations:-:*:*:*:*:wordpress:*:*

part: a version: - update: *

VendorFunnelkit (25092b83-a3d8-56e8-bd8b-cc65ffeaaa8c)
ProductFunnelkit Automations (c2b88069-dc8e-5b47-986c-d11f3114af8b)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9186 vulnerable 2026-06-08 07:00:26.860949 Automation By Autonami < 3.3.0 - Unauthenticated SQLi
The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin before 3.3.0 does not sanitize and escape the bwfan-track-id parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks
Published: 2024-11-14T06:00:11.027Z
Updated: 2024-11-15T19:27:37.434Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.