Aman - vulnerabilities (CVEs)

17 CVEs in 6 products, 4 in the last 30 days, newest from 2026-10-28.

Products

Funnelkit Automations - 6 CVEs
Funnel Builder By Funnelkit - 4 CVEs
Cf7 Views 8211 Complete Entry Management For Contact Form 7 - 3 CVEs
Popup Addon For Ninja Forms - 2 CVEs
Ninja Forms Views 8211 Display Amp Edit Ninja Forms Submissions On Your Site Frontend - 1 CVEs
Views For Wpforms - 1 CVEs

Newest CVEs of Aman

CVE-2026-111411 - CVSS 9.3 (critical), 2026-10-28: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations…
CVE-2026-111841 - CVSS 8.8 (high), 2026-10-26: Cross-Site Request Forgery (CSRF) vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Cross Site Request Forgery.This issue affects…
CVE-2026-40807 - CVSS 7.1 (high), 2026-10-06: Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.
CVE-2026-100513 - CVSS 6.5 (medium), 2026-09-30: Contributor Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.5 versions.
CVE-2026-57411 - CVSS 7.1 (high), 2026-07-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman CF7 Views – Complete Entry Management for…
CVE-2026-39450 - CVSS 7.1 (high), 2026-06-15: Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.
CVE-2026-42741 - CVSS 8.5 (high), 2026-05-12: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja…
CVE-2026-42742 - CVSS 8.5 (high), 2026-05-12: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows…
CVE-2025-66067 - CVSS 6.5 (medium), 2025-11-21: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows…
CVE-2025-64264 - CVSS 5.9 (medium), 2025-11-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms…
CVE-2025-54750 - CVSS 7.5 (high), 2025-08-20: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit…
CVE-2025-49034 - CVSS 7.6 (high), 2025-07-16: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows…
CVE-2025-53279 - CVSS 6.5 (medium), 2025-06-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms…
CVE-2025-49868 - CVSS 4.7 (medium), 2025-06-17: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects…
CVE-2025-30795 - CVSS 4.7 (medium), 2025-03-27: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Phishing.This issue affects…
CVE-2025-26979 - CVSS 7.5 (high), 2025-02-25: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Aman Funnel Builder by FunnelKit…
CVE-2024-47328 - CVSS 7.6 (high), 2024-10-21: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations…