260 matches found
TheDoc
TheDoc は、シンプルながら非常に便利なSQLMAPオートメーターで、組み込みの管理者ファインダー、ハッシュクラッカー（hashcat使用）などを備えています！ 機能: 試行されたインジェクションの総数をカウントします。 指定されたドメインをクロールして脆弱性を探します。 データベース情報を抽出します（インジェクションURL経由） ユーザー、パスワード、メールを抽出します（インジェクションURL経由） /etc/passwdを抽出します（DB管理者の場合、インジェクションURL経由） ドメインの管理者ログインページを見つけます。...
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to addrole and userrole functions missing proper capability checks performed through the...
CVE-2026-82627
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...
CVE-2026-82627 Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...
CVE-2026-82627
The Uncanny Automator plugin for WordPress (versions up to and including 7.6.1.1 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input. This flaw allows authenticated attackers with Subscriber-level access or higher to inject a PHP Object. The attack is feasible wh...
EUVD-2026-94658
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...
PT-2026-107767
The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.6.1.1 via deserialization of untrusted input. This makes it possible for authenticated...
WordPress Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion vulnerability
Authenticated Subscriber+ PHP Object Injection to Arbitrary File Deletion vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Uncanny Automator versions = 7.6.1.1...
WordPress Uncanny Automator plugin <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Integration Metadata Disclosure vulnerability discovered by thevietronin in WordPress Plugin Uncanny Automator versions = 7.3.2...
CVE-2026-15025
The Uncanny Automator WordPress plugin (up to version 7.3.2) is affected by Missing Authorization via four AJAX endpoints (ajax_fetch_labels, segments_fetch, tags_fetch, render_contact_fields). The issue stems from missing capability checks and nonce verification in the handlers, allowing authent...
CVE-2026-15025 Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automatorgooglecontactsfetchlabels, automatormauticsegmentfetch, automatormautictagsfetch, and...
CVE-2026-15025 Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automatorgooglecontactsfetchlabels, automatormauticsegmentfetch, automatormautictagsfetch, and...
CVE-2026-15025: Missing Authorization
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automatorgooglecontactsfetchlabels, automatormauticsegmentfetch, automatormautictagsfetch, and...
CVE-2026-65462
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
CVE-2026-65462 WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
CVE-2026-65462
CVE-2026-65462 affects WordPress plugin Uncanny Automator up to version 7.3.2. The issue is an SQL Injection triggered via administrator context. The CVSS data indicates high confidentiality impact and a local/private exposure path with network scope and no user interaction required, but no expli...
EUVD-2026-48074
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...
CVE-2026-65462 WordPress Uncanny Automator plugin <= 7.3.2 - SQL Injection vulnerability
Administrator SQL Injection in Uncanny Automator = 7.3.2 versions...