A vulnerability classified as critical was found in FunnelKit Automations Plugin up to 3.6.4.1 on WordPress. Impacted is the function
check_nonce of the component AJAX Handler. Such manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-12469. The attack can be executed remotely. There is not any exploit available.