Vulnerability · Published Jan 5, 2024 · Assigned by Patchstack
CVE-2023-52151WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure
Medium 5.3
In plain English
A medium-severity information exposure in Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin from Uncanny Automator, Uncanny Owl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Official description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin.This issue affects Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin: from n/a through 5.1.0.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Uncanny Automator, Uncanny Owl | Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin | n/a – through 5.1.0.2 |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N