Aman - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/aman/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 09:41:03 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAman FunnelKit Automations: Cross-Site Request Forgery (CVE-2026-111841)https://feed.craftedsignal.io/briefs/2026-10-funnelkit-csrf/Mon, 26 Oct 2026 09:41:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-funnelkit-csrf/A Cross-Site Request Forgery (CSRF) vulnerability exists in the Aman FunnelKit Automations WordPress plugin, affecting versions from n/a through 3.8.5.2.<p>A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Aman FunnelKit Automations WordPress plugin (wp-marketing-automations). This vulnerability affects plugin versions from n/a through 3.8.5.2. The vulnerability is assigned a CVSS v3.1 base score of 8.8.</p> highadvisory