This page aggregates publicly disclosed CVE and security risk information related to automatorwp, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2023-23992 | Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete. | [email protected] | 4.3 | 0.26% | 2023-02-28 | 2026-04-28 |
| CVE-2021-24717 | The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions. | [email protected] | 8.8 | 1.29% | 2021-11-01 | 2024-11-21 |