CVE-2026-119163 | teamfunnelkit FunnelKit Automations Plugin up to 3.8.5.2 on WordPress Store API bwfan_cart_id sql injection

October 31, 2026 Yanac

A vulnerability identified as critical has been detected in teamfunnelkit FunnelKit Automations Plugin up to 3.8.5.2 on WordPress. This vulnerability affects unknown code of the component Store API. This manipulation of the argument bwfan_cart_id causes sql injection.

This vulnerability is tracked as CVE-2026-119163. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More