AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI

Güvenlik açıkları

• CVE-2024-12626kimlik doğrulamasız · tıklama gerekir≤ 5.0.9

  AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value

  Kritik 9.6

• CVE-2025-9539abone+≤ 5.3.6

  AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscribe

  Yüksek 8.0

• CVE-2025-68561yüksek yetki≤ 5.2.4

  WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2025-48280yüksek yetki≤ 5.2.1.3

  WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

  Yüksek 7.6

• CVE-2026-42650kimlik doğrulamasız≤ 5.6.7

  WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.2

• CVE-2025-5487yönetici≤ 5.2.5

  AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions

  Yüksek 7.2

• CVE-2026-42775kimlik doğrulamasız · tıklama gerekir≤ 5.7.2

  WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-40785giriş gerekir≤ 5.6.7

  WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability

  Yüksek 7.1

• CVE-2026-78266abone+≤ 5.8.3

  WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability

  Orta 6.5

• CVE-2023-23992kimlik doğrulamasız · tıklama gerekir≤ 2.5.0

  WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

  Orta 4.3

• CVE-2026-76074abone+≤ 5.8.4

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Act

  Orta 4.3

• CVE-2026-76057abone+≤ 5.8.4

  AutomatorWP <= 5.8.4 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action

  Orta 4.3