Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin

Güvenlik açıkları

• CVE-2025-48133

  WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability

  Kritik 9.8

• CVE-2025-3623

  Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function

  Kritik 9.1

• CVE-2025-2075

  Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

  Yüksek 8.8

• CVE-2026-15008

  Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token

  Yüksek 8.1

• CVE-2026-56031

  WordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerability

  Yüksek 8.1

• CVE-2026-65462

  WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-15025

  Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints

  Yüksek 7.5

• CVE-2025-15522

  Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via

  Orta 6.4

• CVE-2023-52151

  WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure

  Orta 5.3

• CVE-2025-66056

  WordPress Uncanny Automator plugin < 6.10.0 - Sensitive Data Exposure vulnerability

  Orta 4.3

• CVE-2025-58193

  WordPress Uncanny Automator Plugin <= 6.7.0.1 - Broken Access Control Vulnerability

  Orta 4.3

• CVE-2025-4520

  Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

  Orta 4.3

• CVE-2024-13838

  Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook

  Düşük 3.8