Plugin icon

AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress

automatorwp

Vulnerabilities:

8

Last Updated:

January 21, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2025-09-08
Title
AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress < 5.3.7 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
Fixed in
Fixed in 5.3.7
CVSS
8 (high)
Published
2025-09-08
Title
AutomatorWP < 5.3.8 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions
Fixed in
Fixed in 5.3.8
CVSS
5.4 (medium)
Published
2025-06-19
Title
AutomatorWP < 5.2.5 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 5.2.5
CVSS
4.9 (medium)
Published
2025-06-13
Title
AutomatorWP < 5.2.6 - Authenticated (Administrator+) SQL Injection via field_conditions
Fixed in
Fixed in 5.2.6
CVSS
7.2 (high)
Published
2025-05-19
Title
AutomatorWP < 5.2.2 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 5.2.2
CVSS
4.9 (medium)
Published
2024-12-18
Title
AutomatorWP < 5.1.0 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Fixed in
Fixed in 5.1.0
CVSS
9.6 (critical)
Published
2023-01-20
Title
AutomatorWP < 2.5.1 - Object Deletion via CSRF
Fixed in
Fixed in 2.5.1
CVSS
4.3 (medium)
Published
2021-09-28
Title
AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation
Fixed in
Fixed in 1.7.6
CVSS
5.4 (medium)