{"id":"CVE-2026-111411","published":"2026-10-28T13:17:04.167","lastModified":"2026-10-28T16:17:01.400","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Blind SQL Injection.This issue affects FunnelKit Automations: from n/a through 3.8.5.2.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/wp-marketing-automations/vulnerability/wordpress-funnelkit-automations-plugin-3-8-5-2-sql-injection-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Blind SQL injection in Aman FunnelKit Automations (plugin version ≤3.8.5.2) allows unauthenticated attackers to infer database contents by observing timing or response differences, due to improper sanitization of user input in SQL queries.","exploitability":"Exploitation is feasible remotely without authentication or user interaction, but requires time-based or error-based techniques to extract data, making it slower and less reliable than classic SQL injection.","blast_radius":"Successful exploitation could lead to full compromise of backend database confidentiality (e.g., user credentials, personal data) and potential disruption via denial-of-service through resource-intensive queries.","remediation":"Upgrade to FunnelKit Automations version 3.8.5.3 or later, which contains the vendor-provided fix for this vulnerability.","detection":"Defenders should monitor web server access logs for unusually long HTTP response times (e.g., >10 seconds) paired with repeated requests containing SQL-like patterns (e.g., 'AND 1=1', 'SLEEP(', 'BENCHMARK(') in query parameters or POST bodies, especially from non-logged-in users.","tags":["sql-injection","blind-sqli","web","no-patch-info-needed"],"model":"garnet-coder","analyzedAt":"2026-10-29T08:45:25.765Z"}}