Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin, with AI-generated Chinese analysis, references, and POCs.

Vendor: uncannyowl

CVE IDTitleCVSSSeverityPublished
CVE-2026-2269 Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload CWE-434 7.2 High2026-03-03
CVE-2025-15522 Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2026-01-23
CVE-2025-4520 Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update CWE-862 5.4 Medium2025-05-14
CVE-2025-3623 Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function CWE-502 9.1 Critical2025-05-14
CVE-2025-2075 Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CWE-862 8.8 High2025-04-04
CVE-2024-13838 Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook CWE-918 5.5 Medium2025-03-12

All 6 known CVE vulnerabilities affecting Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin with full Chinese analysis, references, and POCs where available.