PT-2025-36579

Name of the Vulnerable Software and Affected Versions: AutomatorWP – Automator plugin for WordPress versions through 5.3.7 Description: The AutomatorWP – Automator plugin for WordPress is susceptible to unauthorized access and modification of data. This is due to a missing capability check on...

WordPress plugin AutomatorWP 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

WordPress AutomatorWP plugin <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation vulnerability

Missing Authorization To Authenticated Subscriber+ Remote Code Execution via Automation Creation vulnerability discovered by stealthcopter in WordPress Plugin AutomatorWP versions = 5.3.6...

WordPress AutomatorWP plugin <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions vulnerability

Authenticated Subscriber+ Missing Authorization to Multiple Functions vulnerability discovered by stealthcopter in WordPress Plugin AutomatorWP versions = 5.3.7...

WordPress AutomatorWP plugin <= 5.2.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyen Kim Sang in WordPress Plugin AutomatorWP versions = 5.2.4...

CVE-2025-5487

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the fieldconditions parameter in all versions up to, and including, 5.2.3 due to insufficient escaping on the user supplied...

CVE-2025-5487

The CVE-2025-5487 entry covers AutomatorWP (WordPress) with a time-based SQL Injection via the field_conditions parameter. Root cause is insufficient escaping and poor SQL query preparation, allowing authenticated Administrators (and higher) to append queries to extract data. Connected patches in...

CVE-2025-5487 AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the fieldconditions parameter in all versions up to, and including, 5.2.3 due to insufficient escaping on the user supplied...

WordPress AutomatorWP plugin <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions vulnerability

Authenticated Administrator+ SQL Injection via fieldconditions vulnerability discovered by m0kr4n3 in WordPress Plugin AutomatorWP versions = 5.2.5...

PT-2025-25469 · WordPress · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress versions up to, and including, 5.2.5 Description: The AutomatorWP plugin is vulnerable to time-based SQL Injection via the field conditions...

WordPress plugin AutomatorWP SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2023-23992

Cross-Site Request Forgery CSRF vulnerability in AutomatorWP plugin = 2.5.0 leads to object delete...

CVE-2021-24717

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions...

CVE-2025-48280

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through = 5.2.1.3...

WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by RoyTdd in WordPress Plugin AutomatorWP versions = 5.2.1.3...

CVE-2025-48280

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through = 5.2.1.3...

CVE-2025-48280

CVE-2025-48280 (AutomatorWP) — SQL Injection in AutomatorWP prior to 5.2.1.3 due to improper neutralization of special elements in SQL commands, enabling blind SQL injection. Affected: AutomatorWP up to 5.2.1.3. Mitigation: upgrade to a version later than 5.2.1.3 (patches/updates referenced in Pa...

CVE-2025-48280 WordPress AutomatorWP <= 5.2.1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP allows Blind SQL Injection. This issue affects AutomatorWP: from n/a through 5.2.1.3...

CVE-2025-48280 WordPress AutomatorWP plugin <= 5.2.1.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affects AutomatorWP: from n/a through = 5.2.1.3...

PT-2025-21985 · Unknown · Automatorwp

Name of the Vulnerable Software and Affected Versions: AutomatorWP versions through 5.2.1.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows for Blind SQL Injection, which can be...