Security
فارسی
All products

uncanny-automator

WordPress · Plugin
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Uncanny Automator – Claude & ChatGPT MCP Server with MCP for AI Automation <= 7.7.1 - Missing AuthorizationCVE-2026-120846 uncanny-automator WordPress Medium Fix reported
Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File DeletionCVE-2026-82627 uncanny-automator WordPress High Fix reported
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX EndpointsCVE-2026-15025 uncanny-automator WordPress High Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.2 - Authenticated (Administrator+) SQL InjectionCVE-2026-65462 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field TokenCVE-2026-15008 uncanny-automator WordPress High Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.1.2 - Unauthenticated PHP Object InjectionCVE-2026-56031 uncanny-automator WordPress High Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File UploadCVE-2026-2269 uncanny-automator WordPress High Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-15522 uncanny-automator WordPress Medium Fix reported
Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information ExposureCVE-2025-66056 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 6.7.0.1 - Missing AuthorizationCVE-2025-58193 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message FunctionCVE-2025-3623 uncanny-automator WordPress Critical Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.4.0.2 - Missing AuthorizationCVE-2025-48133 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings UpdateCVE-2025-4520 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationCVE-2025-2075 uncanny-automator WordPress High Fix reported
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via WebhookCVE-2024-13838 uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 4.14 - Cross-Site Request Forgery via update_automator_connect uncanny-automator WordPress Medium Fix reported
Uncanny Automator <= 5.1.0.2 - Sensitive Information Exposure via Log FileCVE-2023-52151 uncanny-automator WordPress Medium Fix reported