Vulnerabilities

TI-2026-12085 CVE-2026-14281 · GHSA-h3w5-2jvm-gf7p

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

MEDIUM 51

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00919 Published 2026-09-25 No fix listed CWE-269

TI-2026-53948 CVE-2026-77264 · GHSA-rcq9-wgmf-73g5

Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

MEDIUM 50

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00707 Published 2026-08-21 No fix listed CWE-640

Vulnerabilities

Filters

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure