Plugin icon

Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included

uncanny-automator

Vulnerabilities:

15

Last Updated:

October 16, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-10-07
Title
Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included < 7.7.0 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
Fixed in
Fixed in 7.7.0
CVSS
7.5 (high)
Published
2026-07-27
Title
Uncanny Automator < 7.4.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
Fixed in
Fixed in 7.4.0
CVSS
6.5 (medium)
Published
2026-07-22
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.4.0 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 7.4.0
CVSS
4.9 (medium)
Published
2026-07-15
Title
Uncanny Automator < 7.4.0 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
Fixed in
Fixed in 7.4.0
CVSS
8.1 (high)
Published
2026-06-23
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.3.1.3 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 7.3.1.3
CVSS
8.1 (high)
Published
2026-03-02
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.1.0 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
Fixed in
Fixed in 7.1.0
CVSS
7.2 (high)
Published
2026-01-22
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 7.0.0
CVSS
6.4 (medium)
Published
2025-11-07
Title
Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 6.10.0
CVSS
4.3 (medium)
Published
2025-08-27
Title
Uncanny Automator < 6.8.0 - Missing Authorization
Fixed in
Fixed in 6.8.0
CVSS
4.3 (medium)
Published
2025-06-02
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 6.5.0 - Missing Authorization
Fixed in
Fixed in 6.5.0
CVSS
6.5 (medium)
Published
2025-05-13
Title
Uncanny Automator < 6.4.0.2 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
Fixed in
Fixed in 6.4.0.2
CVSS
9.1 (critical)
Published
2025-05-09
Title
Uncanny Automator < 6.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Fixed in
Fixed in 6.5.0
CVSS
5.4 (medium)
Published
2025-04-03
Title
Uncanny Automator < 6.4.0 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 6.4.0
CVSS
8.8 (high)
Published
2025-03-11
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 6.3 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Fixed in
Fixed in 6.3
CVSS
5.5 (medium)
Published
2023-12-28
Title
Uncanny Automator < 5.1.0.3 - Sensitive Information Exposure via Log File
Fixed in
Fixed in 5.1.0.3
CVSS
5.3 (medium)