WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
umich-oidc-login
Published
2025-02-18
Title
UMich OIDC Login <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-automator
Published
2023-12-28
Title
Uncanny Automator < 5.1.0.3 - Sensitive Information Exposure via Log File
Slug
uncanny-automator
Published
2025-03-11
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 6.3 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Slug
uncanny-automator
Published
2025-04-03
Title
Uncanny Automator < 6.4.0 - Subscriber+ Privilege Escalation
Slug
uncanny-automator
Published
2025-05-13
Title
Uncanny Automator < 6.4.0.2 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
Slug
uncanny-automator
Published
2025-05-09
Title
Uncanny Automator < 6.5.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Slug
uncanny-automator
Published
2025-06-02
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 6.5.0 - Missing Authorization
Slug
uncanny-automator
Published
2025-08-27
Title
Uncanny Automator < 6.8.0 - Missing Authorization
Slug
uncanny-automator
Published
2025-11-07
Title
Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information Exposure
Slug
uncanny-automator
Published
2026-01-22
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
uncanny-automator
Published
2026-03-02
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.1.0 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
Slug
uncanny-automator
Published
2026-06-23
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.3.1.3 - Unauthenticated PHP Object Injection
Slug
uncanny-automator
Published
2026-07-15
Title
Uncanny Automator < 7.4.0 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
Slug
uncanny-automator
Published
2026-07-22
Title
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin < 7.4.0 - Authenticated (Administrator+) SQL Injection
Slug
uncanny-automator-pro
Published
2024-06-28
Title
Uncanny Automator Pro < 5.3.0.1 - Missing Authorization to Unauthenticated License Setting Reset
Slug
uncanny-automator-pro
Published
2024-06-28
Title
Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset
Slug
uncanny-automator-pro
Published
2024-07-11
Title
Uncanny Automator Pro < 5.3.0.1 - Reflected Cross-Site Scripting
Slug
uncanny-automator-pro
Published
2026-06-16
Title
Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server
Slug
uncanny-automator-pro
Published
2026-06-25
Title
Uncanny Automator Pro < 7.3.0.7 - Authenticated (Subscriber+) PHP Object Injection
Slug
uncanny-learndash-groups
Published
2024-09-24
Title
Uncanny Groups for LearnDash < 6.1.1 - Authenticated (Group Leader+) Privilege Escalation
Slug
uncanny-learndash-groups
Published
2024-09-24
Title
Uncanny Groups for LearnDash < 6.1.1 - Missing Authorization to Authenticated (Group Leader+) User Group Add
Slug
uncanny-learndash-toolkit
Published
2023-01-27
Title
Uncanny Toolkit for LearnDash < 3.6.4.2 - Cross-Site Request Forgery (CSRF)
Slug
uncanny-learndash-toolkit
Published
2025-04-11
Title
Uncanny Toolkit for LearnDash < 3.7.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-learndash-toolkit
Published
2025-05-16
Title
Uncanny Toolkit for LearnDash < 3.7.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
uncanny-learndash-toolkit
Published
2025-09-22
Title
Uncanny Toolkit for LearnDash < 3.7.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting