Plugin icon

WordPress Automatic Plugin

wp-automatic

Vulnerabilities:

9

Last Updated:

March 28, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-08-25
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.119.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Fixed in
Fixed in 3.119.0
CVSS
4.7 (medium)
Published
2025-06-10
Title
WordPress Automatic Plugin - AI content generator and auto poster plugin < 3.116.0 - Authenticated (Author+) Arbitrary File Upload
Fixed in
Fixed in 3.116.0
CVSS
8.8 (high)
Published
2024-05-17
Title
WordPress Automatic < 3.95.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
Fixed in
Fixed in 3.95.0
CVSS
6.4 (medium)
Published
2024-04-19
Title
WordPress Automatic Plugin < 3.93.0 Cross-Site Request Forgery
Fixed in
Fixed in 3.93.0
CVSS
5.4 (medium)
Published
2024-03-13
Title
Automatic < 3.92.1 - Cross-Site Request Forgery to Privilege Escalation
Fixed in
Fixed in 3.92.1
CVSS
8.8 (high)
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.92.1
CVSS
9.8 (critical)
Published
2024-03-13
Title
Automatic < 3.92.1 - Unauthenticated Arbitrary File Download and Server-Side Request Forgery
Fixed in
Fixed in 3.92.1
CVSS
9.8 (critical)
Published
2021-09-06
Title
WordPress Automatic < 3.53.3 - Unauthenticated Arbitrary Options Update
Fixed in
Fixed in 3.53.3
CVSS
9.8 (critical)
Published
2014-08-01
Title
Automatic 2.0.3 - csv.php q Parameter SQL Injection
Fixed in
Fixed in 2.0.4
CVSS
n/a