Medium severity5.4NVD Advisory· Published May 14, 2025· Updated Jun 17, 2026
CVE-2025-4520
CVE-2025-4520
Description
The Uncanny Automator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX functions in versions up to, and including, 6.4.0.2. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:uncannyowl:uncanny_automator:*:*:*:*:*:wordpress:*:*Range: <6.5.0
<=6.4.0.2+ 1 more
- (no CPE)range: <=6.4.0.2
- (no CPE)
- uncannyowl/Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Pluginv5Range: 0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.