Aman vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Aman products: 6 record(s), with severity, exploitation and fixes.

Funnel Builder by FunnelKit 1 FunnelKit Automations 1 Views for WPForms 1 CF7 Views – Complete Entry Management for Contact Form 7 1 Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend 1 Popup addon for Ninja Forms 1

Exploited only (KEV) →

CVE-2026-40807 High · 7.1 CWE-79 Oct 6, 2026

WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

CVE-2026-39450 High · 7.1 CWE-288 Jun 15, 2026

WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability

Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

CVE-2026-42742 High · 8.5 CWE-89 May 12, 2026

WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6.

CVE-2026-42741 High · 8.5 CWE-89 May 12, 2026

WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through <= 3.3.2.

CVE-2025-66067 Medium · 6.5 CWE-79 Nov 21, 2025

WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.13.1.2.

CVE-2025-64264 Medium · 5.9 CWE-79 Nov 13, 2025

WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through <= 3.5.1.