High
CVE-2026-82627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 21
Reset filters
High
CVE-2026-15025
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
Medium
CVE-2026-65462
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-15008
Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
High
CVE-2026-56057
Uncanny Automator Pro <= 7.3.0.6 - Authenticated (Subscriber+) PHP Object Injection
High
CVE-2026-56031
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.1.2 - Unauthenticated PHP Object Injection
Critical
CVE-2026-12375
Uncanny Automator Pro 7.3.0.5 - Maliciously Injected Backdoor
High
CVE-2026-2269
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
Medium
CVE-2025-15522
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2025-66056
Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-58193
Uncanny Automator <= 6.7.0.1 - Missing Authorization
Medium
CVE-2025-48133
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.4.0.2 - Missing Authorization
Critical
CVE-2025-3623
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
Medium
CVE-2025-4520
Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
High
CVE-2025-2075
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-13838
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
Medium
CVE-2024-37117
Uncanny Automator Pro <= 5.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-37118
Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset
Medium
CVE-2024-37119
Uncanny Automator Pro < 5.3.0.1 - Missing Authorization to Unauthenticated License Setting Reset
Medium
CVE-2023-52151
Uncanny Automator <= 5.1.0.2 - Sensitive Information Exposure via Log File
Medium
bd0d8661-4725-41dd-88ce-8e94e285d5b8
Uncanny Automator <= 4.14 - Cross-Site Request Forgery via update_automator_connect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.