Read the docs

Uncanny Owl

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Uncanny Owl records in CISA KEV

No Uncanny Owl vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uncanny Automator 9 records MEDIUM Uncanny Groups For Learndash 3 records LOW Uncanny Toolkit For Learndash 2 records LOW Tin Canny Reporting For Learndash 1 record LOW

Records

9 records in Uncanny Automator · all components

TI-2025-03190 CVE-2025-3623 · GHSA-35ch-876f-6mw7

Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function

Priority MEDIUM 49

The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00869 Published 2025-05-14 No fix listed CWE-502
TI-2024-24647 CVE-2024-37119 · GHSA-w8mq-5926-cx56

WordPress Uncanny Automator Pro plugin < 5.3.0.1 - Unauthenticated License Settings Reset vulnerability

Priority MEDIUM 49

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00547 Published 2024-11-01 No fix listed CWE-862
TI-2025-30503 CVE-2025-48133 · GHSA-2w95-w2p8-6r8j

WordPress Uncanny Automator plugin <= 6.4.0.2 - Broken Access Control Vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.4…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00323 Published 2025-06-05 No fix listed CWE-862
TI-2024-24646 CVE-2024-37118 · GHSA-6g2q-m7q5-4w3c

Cross-site request forgery in Uncanny Automator Pro

Priority LOW 37

Cross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a through 5.3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00202 Published 2024-06-21 No fix listed CWE-352
TI-2024-24645 CVE-2024-37117 · GHSA-m29p-6wp7-hv6g

WordPress Uncanny Automator Pro plugin <= 5.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Automator Pro allows Reflected XSS.This issue affects Uncanny Automator Pro: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-22 No fix listed CWE-79
TI-2024-12861 CVE-2024-13838 · GHSA-6w29-398v-27rj

Server-side request forgery in Uncanny Automator – Easy Automation, Integration, Webhooks…

Priority LOW 25

The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.2 via the 'call_webhook'…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00302 Published 2025-03-12 No fix listed CWE-918
TI-2023-28588 CVE-2023-52151 · GHSA-7jwp-9wj7-pp6x

WordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure

Priority LOW 24

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin.This issue affects…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00444 Published 2024-01-05 No fix listed CWE-200
Open these records in search →