{"id":"CVE-2025-15522","aliases":["EUVD-2026-4439","GHSA-9q86-p4mp-6x9v"],"status":"published","title":"Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin \u003c= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","description":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discord_user_mapping shortcode in all versions up to, and including, 6.10.0.2 due to insufficient input sanitization and output escaping on the verified_message parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user with a verified Discord account accesses the injected page.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00281,"percentile":0.20759,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2026-01-23T04:34:58Z","modified":"2026-06-17T08:37:56Z","products":[{"vendor":"uncannyowl","product":"uncanny automator – easy automation, integration, webhooks \u0026 workflow builder plugin"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/41c54e1b-69b9-4594-8f1e-7ef17f120791?source=cve"},{"url":"https://wordpress.org/plugins/uncanny-automator"},{"url":"https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/6.10.0.2/src/integrations/discord/shortcodes/discord-user-mapping-shortcode.php#L128"},{"url":"https://plugins.trac.wordpress.org/changeset/3440408/uncanny-automator/trunk/src/integrations/discord/shortcodes/discord-user-mapping-shortcode.php"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15522"},{"url":"https://github.com/advisories/GHSA-9q86-p4mp-6x9v"}],"sources":{"cve":[{"id":"CVE-2025-15522","title":"Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin \u003c= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode","description":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discord_user_mapping shortcode in all versions up to, and including, 6.10.0.2 due to insufficient input sanitization and output escaping on the verified_message parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user with a verified Discord account accesses the injected page.","status":"published","published":"2026-01-23T04:34:58.155Z","modified":"2026-04-08T16:48:47.549Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:32:37.680845Z"}],"euvd":[{"id":"EUVD-2026-4439","description":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discord_user_mapping shortcode in all versions up to, and including, 6.10.0.2 due to insufficient input sanitization and output escaping on the verified_message parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user with a verified Discord account accesses the injected page.","status":"published","published":"2026-01-23T04:34:58Z","modified":"2026-04-08T16:48:47Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:25:01.349884Z"}],"ghsa":[{"id":"GHSA-9q86-p4mp-6x9v","title":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin...","description":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discord_user_mapping shortcode in all versions up to, and including, 6.10.0.2 due to insufficient input sanitization and output escaping on the verified_message parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user with a verified Discord account accesses the injected page.","status":"published","published":"2026-01-23T06:31:25Z","modified":"2026-01-23T06:31:33Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:05:52.452073Z"}],"nvd":[{"id":"CVE-2025-15522","description":"The Uncanny Automator – Easy Automation, Integration, Webhooks \u0026 Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discord_user_mapping shortcode in all versions up to, and including, 6.10.0.2 due to insufficient input sanitization and output escaping on the verified_message parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user with a verified Discord account accesses the injected page.","status":"published","published":"2026-01-23T05:16:21.043Z","modified":"2026-06-17T08:37:56.95Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:11:59.073638Z"}]}}