A vulnerability classified as critical was found in FunnelKit Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing and Marketing Automation Plugin up to 3.2.x on WordPress. This vulnerability affects unknown code. The manipulation of the argument bwfan-track-id leads to sql injection.
This vulnerability was named CVE-2024-9186. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
