WordPress plugin
WordPress Automatic Plugin security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High3
- Medium3
- Low0
All WordPress Automatic Plugin vulnerabilities
- High7.2Unauthenticated Stored Cross-Site Scripting
<3.135.1Update to 3.135.1
- Medium4.7AI content generator and auto poster plugin <= 3.118.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
≤3.118.0Update to 3.119.0
- High8.8AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload
≤3.115.0Update to 3.116.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via autoplay Parameter
≤3.94.0Update to 3.95.0
- Medium5.4WordPress Automatic Plugin <= 3.92.1 Cross-Site Request Forgery
≤3.92.1Update to 3.93.0
- Critical9.8Unauthenticated Arbitrary File Download and Server-Side Request Forgery
≤3.92.0Update to 3.92.1
- High8.8Cross-Site Request Forgery to Privilege Escalation
≤3.92.0Update to 3.92.1
- Critical9.8Unauthenticated SQL Injection
≤3.92.0Update to 3.92.1
- Critical9.1Unauthenticated Arbitrary Options Update
<3.53.3Update to 3.53.3
- Critical9.8Cross-Site Request Forgery to SQL Injection
≤2.0.3Update to 2.0.4
WordPress Automatic Plugin: common questions
Does WordPress Automatic Plugin have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WordPress Automatic Plugin: 4 critical, 3 high, 3 medium. None are known to affect version null.
How do I check which version of WordPress Automatic Plugin I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WordPress Automatic Plugin vulnerability?
CVE-2026-56045, published Jun 25, 2026: WordPress Automatic Plugin < 3.135.1 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any WordPress Automatic Plugin vulnerability listed in CISA KEV?
No. None of the known WordPress Automatic Plugin vulnerabilities is currently listed in the CISA KEV catalog.