Uncannyowl Uncanny Automator — known CVE vulnerabilities

Every CVE whose affected-product data names Uncannyowl Uncanny Automator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2025-3623 — CVSS 9.1 (critical): The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via…
• CVE-2025-2075 — CVSS 8.8 (high): The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege…
• CVE-2024-37117 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Automator…
• CVE-2025-48133 — CVSS 6.5 (medium): Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access…
• CVE-2024-13838 — CVSS 5.5 (medium): The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to…
• CVE-2024-37118 — CVSS 5.4 (medium): Cross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a…
• CVE-2025-4520 — CVSS 5.4 (medium): The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple…
• CVE-2024-37119 — CVSS 5.3 (medium): Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2023-52151 — CVSS 5.3 (medium): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate…