CVE-2025-3623

🗓️ 14 May 2025 02:23:17Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 51 Views

Vulnerability in Uncanny Automator allows PHP Object Injection for authenticated users in version 6.4.0.1.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-3623	14 May 202504:57	–	circl
CNNVD	WordPress plugin Uncanny Automator 代码问题漏洞	14 May 202500:00	–	cnnvd
Cvelist	CVE-2025-3623 Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function	14 May 202502:23	–	cvelist
EUVD	EUVD-2025-14637	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3623	14 May 202503:15	–	nvd
OSV	CVE-2025-3623	14 May 202503:15	–	osv
Patchstack	WordPress Uncanny Automator plugin <= 6.4.0.1 - Authenticated (Subscriber+) PHP Object Injection in automator_api_decode_message Function vulnerability	13 May 202516:41	–	patchstack
Positive Technologies	PT-2025-21133 · WordPress · Uncanny Automator	14 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3623	16 May 202503:15	–	redhatcve
Vulnrichment	CVE-2025-3623 Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function	14 May 202502:23	–	vulnrichment

NVD

Vulners

Node

uncannyowl uncanny_automatorRange<6.4.0.2wordpress

[
  {
    "vendor": "uncannyowl",
    "product": "Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.4.0.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/uncanny-automator/
automatorplugin	www.automatorplugin.com/knowledge-base/uncanny-automator-changelog/
plugins	www.plugins.trac.wordpress.org/changeset/3276577/uncanny-automator/trunk/src/core/lib/helpers/class-automator-recipe-helpers.php
plugins	www.plugins.trac.wordpress.org/browser/uncanny-automator/trunk/src/core/lib/helpers/class-automator-recipe-helpers.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/00bcfd8f-9785-449a-a0ea-16e2583d684a

08 Apr 2026 16:32Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.1

EPSS0.01091

SSVC

CWE-502