{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aamanfunnelkit_automationswordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:aman:funnelkit_automations:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-111841"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FunnelKit Automations (\u003c= 3.8.5.2)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Aman"],"content_html":"\u003cp\u003eA Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Aman FunnelKit Automations WordPress plugin (wp-marketing-automations). This vulnerability affects plugin versions from n/a through 3.8.5.2. The vulnerability is assigned a CVSS v3.1 base score of 8.8.\u003c/p\u003e\n","date_modified":"2026-10-26T09:41:03Z","date_published":"2026-10-26T09:41:03Z","id":"https://feed.craftedsignal.io/briefs/2026-10-funnelkit-csrf/","summary":"A Cross-Site Request Forgery (CSRF) vulnerability exists in the Aman FunnelKit Automations WordPress plugin, affecting versions from n/a through 3.8.5.2.","title":"Aman FunnelKit Automations: Cross-Site Request Forgery (CVE-2026-111841)","url":"https://feed.craftedsignal.io/briefs/2026-10-funnelkit-csrf/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:aman:funnelkit_automations:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}