127 matches found
CVE-2026-76057: Missing Authorization
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...
PT-2026-79504
Name of the Vulnerable Software and Affected Versions AutomatorWP versions prior to 5.8.5 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated users with subscriber-level access or higher can...
PT-2026-79505
Name of the Vulnerable Software and Affected Versions AutomatorWP versions prior to 5.8.5 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated users with subscriber-level access or higher can...
CVE-2026-76074: Missing Authorization
The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an...
EUVD-2026-36989
Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...
CVE-2026-42775
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...
CVE-2026-42650
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...
CVE-2026-40785
Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...
CVE-2026-42775 WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...
EUVD-2026-36839
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...
CVE-2026-42775 WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.7.2 versions...
CVE-2026-42775
The CVE-2026-42775 issue affects the WordPress plugin AutomatorWP (versions ≤ 5.7.2). It is an unauthenticated Cross Site Scripting (XSS) vulnerability in AutomatorWP ≤ 5.7.2. The provided data lists a CVSS v3.1 base score of 7.1 (High) with network attack vector, no privileges required, and user...
CVE-2026-42650 WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...
CVE-2026-42650 WordPress AutomatorWP plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...
CVE-2026-42650
The CVE-2026-42650 entry concerns the WordPress AutomatorWP plugin (versions
EUVD-2026-36818
Unauthenticated Cross Site Scripting XSS in AutomatorWP = 5.6.7 versions...
CVE-2026-40785 WordPress AutomatorWP plugin <= 5.6.7 - Broken Authentication vulnerability
Subscriber Broken Authentication in AutomatorWP = 5.6.7 versions...
CVE-2026-40785
CVE-2026-40785 concerns WordPress AutomatorWP plugin