WordPress plugin
Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 17 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High6
- Medium10
- Low0
All Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT vulnerabilities
- Medium5.3Missing Authorization
≤7.7.1Update to 8.0.0
- High7.5Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion
≤7.6.1.1Update to 7.7.0
- High7.5Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
≤7.3.2Update to 7.4.0
- Medium4.9Authenticated (Administrator+) SQL Injection
≤7.3.2Update to 7.4.0
- High8.1Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token
≤7.3.1.4Update to 7.4.0
- High8.1Unauthenticated PHP Object Injection
≤7.3.1.2Update to 7.3.1.3
- High7.2Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload
≤7.0.0.3Update to 7.1.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤6.10.0.2Update to 7.0.0
- Medium4.3Authenticated (Subscriber+) Information Exposure
<6.10.0Update to 6.10.0
- Medium4.3Missing Authorization
≤6.7.0.1Update to 6.8.0
- Medium6.5Missing Authorization
≤6.4.0.2Update to 6.5.0
- Critical9.1Unauthenticated PHP Object Injection in automator_api_decode_message Function
≤6.4.0.1Update to 6.4.0.2
- Medium5.4Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
≤6.4.0.2Update to 6.5.0
- High8.8Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
≤6.3.0.2Update to 6.4.0
- Medium5.5Authenticated (Admin+) Server-Side Request Forgery via Webhook
≤6.2Update to 6.3
- Medium5.3Sensitive Information Exposure via Log File
≤5.1.0.2Update to 5.1.0.3
- Medium5.4Cross-Site Request Forgery via update_automator_connect
<4.15Update to 4.15
Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT: common questions
Does Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT have known vulnerabilities?
Yes. VulnCrest Radar lists 17 known vulnerabilities in Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT: 1 critical, 6 high, 10 medium. None are known to affect version null.
How do I check which version of Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT vulnerability?
CVE-2026-120846, published Nov 3, 2026: Uncanny Automator – Claude & ChatGPT MCP Server with MCP for AI Automation <= 7.7.1 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT vulnerability listed in CISA KEV?
No. None of the known Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT vulnerabilities is currently listed in the CISA KEV catalog.