AutomatorWP

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AutomatorWP records in CISA KEV

No AutomatorWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Automatorwp 2 records MEDIUM

Records

2 records in Automatorwp · all components

TI-2021-06999 CVE-2021-24717 · GHSA-w87w-64p4-f94p

AutomatorWP < 1.7.6 - Missing Authorization and Privilege Escalation

MEDIUM 41

The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perfo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01337 Published 2021-11-01 Fixed in 1.7.6 CWE-863

TI-2023-09779 CVE-2023-23992 · GHSA-w3rj-q63c-79p9

WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00263 Published 2023-02-28 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0