Aman FunnelKit Automations wp-marketing-automations contains a critical Blind SQL Injection vulnerability (CVE-2026-111411) affecting versions up to 3.8.5.2. This flaw allows an unauthenticated attacker to execute SQL commands remotely without user interaction, potentially leading to high confidentiality impact and partial availability impact. No public exploits or known active exploitation have been reported. No patch information is currently available.