Back to the CVE list

CVE-2026-111411

WordPress FunnelKit Automations plugin <= 3.8.5.2 - SQL Injection vulnerability

CVSS score

9.3

EPSS probability

—

Risk score

0.9

Published

2 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

7.1

CVE-2026-40807WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

VendorAman ProductCF7 Views – Complete Entry Management for Contact Form 7

Patch status unknownEPSS %022 d ago

8.8

CVE-2026-111841WordPress FunnelKit Automations plugin <= 3.8.5.2 - Cross Site Request Forgery (CSRF) vulnerability

VendorAman ProductFunnelKit Automations

Patch status unknownEPSS %02 d ago

6.5

CVE-2026-100513WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

VendorAman ProductCF7 Views – Complete Entry Management for Contact Form 7

Patch status unknownEPSS %028 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-111411"

CVE-2026-111411 · WordPress FunnelKit Automations plugin <=…