WordPress plugin
AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium12
- Low0
All AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option ≤6.0.4Update to 6.0.5 | CVE-2026-104768 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.7.2Update to 5.7.3 | CVE-2026-42775 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.6.7Update to 5.6.8 | CVE-2026-42650 | |
| High8.0 | Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation ≤5.3.6Update to 5.3.7 | CVE-2025-9539 | |
| High7.2 | Authenticated (Administrator+) SQL Injection via field_conditions ≤5.2.5Update to 5.2.6 | CVE-2025-5487 | |
| Critical9.6 | Reflected Cross-Site Scripting via a-0-o-search_field_value ≤5.0.9Update to 5.1.0 | CVE-2024-12626 | |
| High8.8 | Privilege Escalation <1.7.6Update to 1.7.6 | CVE-2021-24717 |
- High7.5Unauthenticated Privilege Escalation to Insufficient Role Validation in Anonymous Automation 'Role' Option
≤6.0.4Update to 6.0.5
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.7.2Update to 5.7.3
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.6.7Update to 5.6.8
- High8.0Missing Authorization To Authenticated (Subscriber+) Remote Code Execution via Automation Creation
≤5.3.6Update to 5.3.7
- High7.2Authenticated (Administrator+) SQL Injection via field_conditions
≤5.2.5Update to 5.2.6
- Critical9.6Reflected Cross-Site Scripting via a-0-o-search_field_value
≤5.0.9Update to 5.1.0
- High8.8Privilege Escalation
<1.7.6Update to 1.7.6
AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI: common questions
Does AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI: 1 critical, 6 high, 12 medium. None are known to affect version null.
How do I check which version of AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerability?
CVE-2026-121472, published Nov 11, 2026: AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI < 6.0.8 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerability listed in CISA KEV?
No. None of the known AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI vulnerabilities is currently listed in the CISA KEV catalog.