CVE-2025-30795mediumCWE-601

CVE-2025-30795: falha de média gravidade em Aman FunnelKit Automations

WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FunnelKit Automations

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.7epss 0.4%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects FunnelKit Automations: from n/a through <= 3.5.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Produtos afetados
Aman · FunnelKit Automations
CVEs relacionadas — Aman FunnelKit Automations

No mesmo produto, das mais perigosas para as menos.

CVE-2024-47328HIGHWordPress Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin <= 3.1.2 - SQL Injection vulnerabilityEPSS 0.5%CVE-2026-39738CRITICALWordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-39450HIGHWordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2026-111411CRITICALWordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-49868MEDIUMWordPress Automation By Autonami plugin <= 3.6.0 - Open Redirection VulnerabilityEPSS 0.2%CVE-2026-111841HIGHWordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%