https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-48133.htmlhttps://patchthecve.com/cve/CVE-2025-48133.htmlWed, 17 Jun 2026 09:29:12 +0000MEDIUM 6.5: Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through <= 6.4.0.2.https://patchthecve.com/cve/CVE-2025-4520.htmlhttps://patchthecve.com/cve/CVE-2025-4520.htmlWed, 17 Jun 2026 09:33:26 +0000MEDIUM 5.4: The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to updahttps://patchthecve.com/cve/CVE-2025-3623.htmlhttps://patchthecve.com/cve/CVE-2025-3623.htmlWed, 17 Jun 2026 09:20:20 +0000CRITICAL 9.1: The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automator_api_decode_message() function. This makes it possible for unauthenticated to inject a PHP Object. The additional preshttps://patchthecve.com/cve/CVE-2025-2075.htmlhttps://patchthecve.com/cve/CVE-2025-2075.htmlWed, 17 Jun 2026 09:06:15 +0000HIGH 8.8: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.0.2. This is due to add_role() and user_role() functions missing proper capability checks performed through the validhttps://patchthecve.com/cve/CVE-2024-13838.htmlhttps://patchthecve.com/cve/CVE-2024-13838.htmlWed, 17 Jun 2026 07:02:49 +0000MEDIUM 5.5: The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.2 via the 'call_webhook' method of the Automator_Send_Webhook class This makes it possible for authenticahttps://patchthecve.com/cve/CVE-2024-37119.htmlhttps://patchthecve.com/cve/CVE-2024-37119.htmlWed, 17 Jun 2026 07:37:47 +0000MEDIUM 5.3: Missing Authorization vulnerability in Uncanny Owl Uncanny Automator Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator Pro: from n/a through 5.3.0.0.https://patchthecve.com/cve/CVE-2024-37117.htmlhttps://patchthecve.com/cve/CVE-2024-37117.htmlWed, 17 Jun 2026 07:37:47 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Uncanny Owl Uncanny Automator Pro allows Reflected XSS.This issue affects Uncanny Automator Pro: from n/a through 5.3.https://patchthecve.com/cve/CVE-2024-37118.htmlhttps://patchthecve.com/cve/CVE-2024-37118.htmlWed, 17 Jun 2026 07:37:47 +0000MEDIUM 5.4: Cross Site Request Forgery (CSRF) vulnerability in Uncanny Owl Uncanny Automator Pro.This issue affects Uncanny Automator Pro: from n/a through 5.3.https://patchthecve.com/cve/CVE-2023-52151.htmlhttps://patchthecve.com/cve/CVE-2023-52151.htmlWed, 17 Jun 2026 06:42:11 +0000MEDIUM 5.3: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Uncanny Automator, Uncanny Owl Uncanny Automator – Automate everything with the #1 no-code automation and integration plugin.This issue affects Uncanny Automator – Automate everything with the #1 no-code automation and integ