uncannyowl vulnerabilities
10 published CVEs name uncannyowl among the affected products.
- 10Published CVEs10 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical5 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119096
Uncanny Toolkit for LearnDash <= 3.8.2 - Unauthenticated Authentication Bypass via 'email' Parameter
uncannyowl · Uncanny Toolkit for LearnDash
Critical9.8 - CVE-2026-82627
Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
uncannyowl · Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included
High7.5 - CVE-2026-15025
Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
High7.5 - CVE-2026-15008
Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
High8.1 - CVE-2026-2269
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
High7.2 - CVE-2025-15522
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Medium6.4 - CVE-2025-4520
Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Medium5.4 - CVE-2025-3623
Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Critical9.1 - CVE-2025-2075
Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
High8.8 - CVE-2024-13838
Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook
uncannyowl · Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Medium5.5