Skip to contentUncannyowl Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin vulnerabilities
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder pluginUncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX EndpointsCVE-2026-150257.5 High
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder pluginUncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field TokenCVE-2026-150088.1 High
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder pluginUncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File UploadCVE-2026-22697.2 High
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder pluginUncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-155226.4 Medium
- uncannyowl uncanny automator, uncanny automator – easy automation, integration, webhooks & workflow builder plugin +1 moreUncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings UpdateCVE-2025-45205.4 Medium
- uncannyowl uncanny automator, uncanny automator – easy automation, integration, webhooks & workflow builder plugin +1 moreUncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message FunctionCVE-2025-36239.1 Critical
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 moreUncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege EscalationCVE-2025-20758.8 High
- uncannyowl uncanny automator – easy automation, integration, webhooks & workflow builder plugin, uncanny automator +1 moreUncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via WebhookCVE-2024-138385.5 Medium