https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:21:47.977873+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-286703 EUVD-2026-286703 2026-10-05T18:21:48.023539+00:00 EUVD-2026-286703 https://cve.radiocsirt.org/vuln/fkie_cve-2025-9539 fkie_cve-2025-9539 2026-10-05T18:21:48.023573+00:00

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the automatorwp_ajax_import_automation_from_url function in all versions up to, and including, 5.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary automations, which can lead to Remote Code Execution or Privilege escalation once such automation is activated by the administrator

 https://cve.radiocsirt.org/vuln/ghsa-w4r4-wvrh-xgqg GHSA-w4r4-wvrh-xgqg 2026-10-05T18:21:48.023611+00:00

The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the automatorwp_ajax_import_automation_from_url function in all versions up to, and including, 5.3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary automations, which can lead to Remote Code Execution or Privilege escalation once such automation is activated by the administrator