Skip to content
uncannyowl Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
-
CVE-2026-15025
High 7.5
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
0.7%
-
CVE-2026-15008
High 8.1
Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
1.0%
-
CVE-2026-2269
High 7.2
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
0.7%
-
CVE-2025-15522
Medium 6.4
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
0.3%
-
CVE-2025-4520
Medium 5.4
Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
0.3%
-
CVE-2025-3623
Critical 9.1
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
0.9%
-
CVE-2025-2075
High 8.8
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
2.8%
-
CVE-2024-13838
Medium 5.5
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
0.3%