Skip to content
PluginCanary

FunnelKit Automations

FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce
by FunnelKit · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 40 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for FunnelKit Automations
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is FunnelKit Automations still maintained?
Yes. Last release 3 Nov 2026, 40 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns FunnelKit Automations, and has it changed hands?
No change recorded. Main committer amans2k since Nov 2019. 4 Nov 2026 · SVN log
Was FunnelKit Automations removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is FunnelKit Automations safe?
17 known vulnerabilities, all fixed (latest in 3.8.6). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest FunnelKit Automations update safe to install?
No ownership change before 3.9.0. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master13 Nov 2019 to 13 Nov 2019, 1 commits
amans2k28 Nov 2019 to 3 Nov 2026, 261 commits
amrt_tri11 Mar 2020 to 14 Jan 2021, 18 commits
teamwoofunnels24 Jan 2024 to 10 Feb 2025, 14 commits

4 committers recorded. No ownership change since 2019.

Maintenance

Last release
yesterday
Releases, 24 months
40
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for FunnelKit Automations
Q1 20244
Q2 20245
Q3 20246
Q4 20245
Q1 20254
Q2 20255
Q3 20254
Q4 20253
Q1 20264
Q2 20265
Q3 20269
Q4 20265

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 5.0.

Average rating per quarter for FunnelKit Automations
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star339
4 star3
3 star1
2 star1
1 star2

Security record

12 vulnerabilities in 24 months (17 on record), all patched (latest fixed in 3.8.6).

Show 17 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026FunnelKit Automations <= 3.8.5.2 - Unauthenticated SQL Injection via 'bwfan_cart_id' Parameter7.5<= 3.8.5.23.8.6Patched before disclosure
30 Oct 2026FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.6.1 - Unauthenticated PHP Object Injection8.1<= 3.8.6.13.8.6.2Patched before disclosure
26 Oct 2026FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.5.2 - Unauthenticated SQL Injection7.5<= 3.8.5.23.8.6Patched before disclosure
26 Oct 2026FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.8.5.2 - Cross-Site Request Forgery4.3<= 3.8.5.23.8.6Patched before disclosure
22 Apr 2026FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.7.3 - Missing Authorization4.3<= 3.7.33.8.0Patched before disclosure
4 Nov 2025FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Unauthenticated Sensitive Information Exposure5.3<= 3.6.4.13.6.4.2Patched before disclosure
4 Nov 2025FunnelKit Automations - Email Marketing Automation and CRM for WordPress & WooCommerce <= 3.6.4.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending4.3<= 3.6.4.13.6.4.2Patched before disclosure
18 Aug 2025Multiple Plugins By FunnelKit <= (Various Versions) - Authenticated (Contributor+) Sensitive Information Exposure to Privilege Escalation via Woofunnel Library8.8<= 3.6.33.6.4Patched before disclosure
17 Jun 2025Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation9.8<= 3.5.33.6.0Patched before disclosure
12 Jun 2025Automation By Autonami <= 3.6.0 - Open Redirect6.1<= 3.6.03.6.1Patched before disclosure
27 Mar 2025Automation By Autonami <= 3.5.1 - Open Redirect7.2<= 3.5.13.5.2Patched before disclosure
21 Mar 2025Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.1 - Unauthenticated SQL Injection via 'automationId'7.5<= 3.5.13.5.2Patched before disclosure
24 Oct 2024Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.2.2 - Unauthenticated SQL Injection7.5<= 3.2.23.3.0Patched before disclosure
25 Sep 2024Automation By Autonami <= 3.1.2 - Authenticated (Administrator+) SQL Injection4.9<= 3.1.23.2.0Patched before disclosure
18 Mar 2024Automation By Autonami <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.8.22.8.3Patched before disclosure
21 Dec 2023Automation By Autonami <= 2.6.1 - Authenticated(Administrator+) SQL Injection6.6< 2.7.02.7.0Patched before disclosure
15 Jul 2022Abandoned Cart Recovery for WooCommerce by Autonami <= 2.1.1 - Missing Authorization6.3<= 2.1.12.1.21

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for FunnelKit Automations
4 May 2026520
11 May 20261,508
18 May 202617,264
25 May 20263,530
1 Jun 20262,138
8 Jun 20261,706
15 Jun 20261,422
22 Jun 20268,066
29 Jun 202610,174
6 Jul 20264,885
13 Jul 20261,884
20 Jul 20261,690
27 Jul 20267,669
3 Aug 202618,827
10 Aug 20262,679
17 Aug 20261,816
24 Aug 20261,569
31 Aug 20261,480
7 Sep 20261,152
14 Sep 20261,207
21 Sep 20261,221
28 Sep 20261,303
5 Oct 20261,211
12 Oct 20261,196
19 Oct 20268,199
26 Oct 202619,882
2 Nov 2026958

Weekly downloads over the last 4 weeks are 63% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

KlaviyoScore 100 · 100,000+Mailjet Email MarketingScore 98 · 10,000+SureContactScore 97 · 10,000+Mailchimp List Subscribe FormScore 95 · 60,000+Kit (formerly ConvertKit)Score 95 · 40,000+

Facts

Version3.9.0
AuthorFunnelKit
Added28 Nov 2019
Last updated3 Nov 2026
Active installs20,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
Tagsnewsletter, Email Marketing, cart abandonment, follow up emails, marketing automation

Other plugins by this author: FunnelKit - Funnel Builder Plugin for WooCommerce Checkout, Sliding Cart for WooCommerce by FunnelKit - Skip Cart & Reach WooCommerce Checkout Faster, FunnelKit Payment Gateway for Stripe WooCommerce, SlingBlocks - Gutenberg Blocks by FunnelKit (Formerly WooFunnels), FunnelKit Payment Gateway with PayPal for WooCommerce, FunnelKit Payment Gateway for Square WooCommerce

Questions

Is FunnelKit Automations still maintained?

Yes. Last release 3 Nov 2026, 40 releases in the last 24 months.

Who owns FunnelKit Automations, and has it changed hands?

No change recorded. Main committer amans2k since Nov 2019.

Was FunnelKit Automations removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is FunnelKit Automations safe?

17 known vulnerabilities, all fixed (latest in 3.8.6). Not on the exploited list.

Is the latest FunnelKit Automations update safe to install?

No ownership change before 3.9.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue