AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI

Уязвимости

• CVE-2024-12626без авторизации · нужен клик≤ 5.0.9

  AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value

  Критич. 9.6

• CVE-2025-9539подписчик+≤ 5.3.6

  AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscribe

  Высокий 8.0

• CVE-2025-68561высокие права≤ 5.2.4

  WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability

  Высокий 7.6

• CVE-2025-48280высокие права≤ 5.2.1.3

  WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

  Высокий 7.6

• CVE-2026-42650без авторизации≤ 5.6.7

  WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.2

• CVE-2025-5487админ≤ 5.2.5

  AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions

  Высокий 7.2

• CVE-2026-42775без авторизации · нужен клик≤ 5.7.2

  WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-40785нужен вход≤ 5.6.7

  WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability

  Высокий 7.1

• CVE-2026-78266подписчик+≤ 5.8.3

  WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2023-23992без авторизации · нужен клик≤ 2.5.0

  WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

  Средний 4.3

• CVE-2026-76074подписчик+≤ 5.8.4

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Act

  Средний 4.3

• CVE-2026-76057подписчик+≤ 5.8.4

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

  Средний 4.3