Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: rubengc

CVE IDTitleCVSSSeverityPublished
CVE-2025-9539 AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress <= 5.3.6 - Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation CWE-94 8.0 High2025-09-09
CVE-2025-9542 AutomatorWP <= 5.3.7 - Authenticated (Subscriber+) Missing Authorization to Multiple Functions CWE-862 5.4 Medium2025-09-09
CVE-2025-5487 AutomatorWP <= 5.2.5 - Authenticated (Administrator+) SQL Injection via field_conditions CWE-89 7.2 High2025-06-14
CVE-2024-12626 AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value CWE-79 9.6 Critical2024-12-19

All 4 known CVE vulnerabilities affecting AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress with full Chinese analysis, references, and POCs where available.