WordPress plugin
AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium12
- Low0
All AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerabilities
- Medium4.3Cross-Site Request Forgery
<6.0.8Update to 6.0.8
- High7.5Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option
≤6.0.4Update to 6.0.5
- Medium5.3Missing Authorization
≤6.0.6Update to 6.0.7
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via wp_ajax_automatorwp_fluentform_get_forms AJAX Action
≤5.8.4Update to 5.8.5
- Medium4.3Missing Authorization
≤5.8.3Update to 5.8.4
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_convertkit_get_forms AJAX Action
≤5.8.4Update to 5.8.5
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via automatorwp_campaign_monitor_get_lists AJAX Action
≤5.8.4Update to 5.8.5
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.7.2Update to 5.7.3
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.6.7Update to 5.6.8
- Medium4.3Missing Authorization
≤5.6.7Update to 5.6.8
- High8.0Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
≤5.3.6Update to 5.3.7
- Medium5.4Authenticated (Subscriber+) Missing Authorization to Multiple Functions
≤5.3.7Update to 5.3.8
- Medium4.9Authenticated (Administrator+) SQL Injection
≤5.2.4Update to 5.2.5
- High7.2Authenticated (Administrator+) SQL Injection via field_conditions
≤5.2.5Update to 5.2.6
- Medium4.9Authenticated (Administrator+) SQL Injection
≤5.2.1.3Update to 5.2.2
- Critical9.6Reflected Cross-Site Scripting via a-0-o-search_field_value
≤5.0.9Update to 5.1.0
- Medium4.3Cross Site Request Forgery via bulk_delete
≤2.5.8Update to 2.5.9
- Medium4.3Cross Site Request Forgery
≤2.5.0Update to 2.5.1
- High8.8Privilege Escalation
<1.7.6Update to 1.7.6
AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI: common questions
Does AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI: 1 critical, 6 high, 12 medium. None are known to affect version null.
How do I check which version of AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerability?
CVE-2026-121472, published Nov 11, 2026: AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI < 6.0.8 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerability listed in CISA KEV?
No. None of the known AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerabilities is currently listed in the CISA KEV catalog.