Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin, with AI-generated Chinese analysis, references, and POCs.

Vendor: uncannyowl

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15025	Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints CWE-862	7.5	High	2026-07-28
CVE-2026-15008	Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token CWE-502	8.1	High	2026-07-16
CVE-2026-2269	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload CWE-434	7.2	High	2026-03-03
CVE-2025-15522	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79	6.4	Medium	2026-01-23
CVE-2025-4520	Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update CWE-862	5.4	Medium	2025-05-14
CVE-2025-3623	Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function CWE-502	9.1	Critical	2025-05-14
CVE-2025-2075	Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CWE-862	8.8	High	2025-04-04
CVE-2024-13838	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook CWE-918	5.5	Medium	2025-03-12

All 8 known CVE vulnerabilities affecting Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin with full Chinese analysis, references, and POCs where available.