5.4Mittel

CVE-2025-4520Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update

uncannyowl Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin Veröffentlicht: 2025-05-14 05:23 (vor 1 Jahr)

Beschreibung

The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.

Schwachstellentyp (CWE): CWE-862

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
uncannyowl	uncanny automator	< 6.5.0
uncannyowl	Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin	≤ 6.4.0.2

Referenzen und Patches

CPE-Treffer (NVD) (1)

cpe:2.3:a:uncannyowl:uncanny_automator:*:*:*:*:*:wordpress:*:* < 6.5.0

CVSS-Score

5.4Mittel

Quelle: Wordfence · CVSS 3.1

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Niedrig
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Keine
Integrität: Niedrig
Verfügbarkeit: Niedrig

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Alle Scores (3)

cna	CVSS 3.1	5.4Mittel
security@wordfence.com	CVSS 3.1	5.4Mittel
nvd	CVSS 3.1	4.3Mittel

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

0.30%

höher als 23 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: partial

Zeitverlauf

ID reserviert2025-05-09
Veröffentlicht2025-05-14 05:23
Bei IP-DB eingegangen2026-10-25 00:03
Zuletzt aktualisiert2026-06-17 12:33

Vergeben von (CNA): Wordfence
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — WordPress plugins & themes

Ohne Score

CVE-2026-127048 vor 3 Stunden

Lazy Blocks < 3.0.0 - Unauthenticated RCE

Custom Block Builder

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary…

Ohne Score

CVE-2026-124673 vor 3 Stunden

Burst Statistics < 3.7.5 - Unauthenticated Draft and Private Post Title Disclosure via Forged Page View

Burst Statistics

The Burst Statistics WordPress plugin before 3.7.5 does not check that a reported page view belongs to published content, nor check post status before listing post titles and links in its public statistics output, allowing unauthenticated attackers to disclo…

Ohne Score

CVE-2026-124671 vor 3 Stunden

Burst Statistics < 3.7.5 - Unauthenticated Analytics Disclosure Beyond Shared Report Date Range

Burst Statistics

The Burst Statistics WordPress plugin before 3.7.5 does not enforce a shared report's date range on the analytics it serves to the report's share link, allowing anyone holding the link to read the report's statistics for any period the site retains rather th…

Ohne Score

CVE-2026-123707 vor 3 Stunden

WPGraphQL < 2.27.1 - Contributor+ Custom Post Status Content Disclosure

WPGraphQL

The WPGraphQL WordPress plugin before 2.27.1 does not restrict access to posts in custom non-public post statuses, allowing users with the Contributor role and above to read the content of other users' posts in those statuses.

Ohne Score

CVE-2026-114452 vor 3 Stunden

Kadence Memberships 3.2.17 - 4.0.5 - Subscriber+ Stripe Client Secret Disclosure and Payment Method Manipulation via IDOR

Membership Plugin

The Membership Plugin WordPress plugin before 4.0.6 does not verify that the membership referenced in a saved-card payment request belongs to the user making it, allowing subscriber-level members to disclose another member's Stripe payment client secret and …

Ohne Score

CVE-2026-114451 vor 3 Stunden

Kadence Memberships < 4.0.6 - Unauthenticated Table Collation Downgrade via 'rcp-action' Parameter

Membership Plugin

The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a schema-altering database maintenance routine, allowing unauthenticated users to convert the Membership Plugin WordPress plugin before 4.0.6…