Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2023-23992
Disclosure Date: February 28, 2023 (last updated November 08, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete.
0
Attacker Value
Unknown
CVE-2021-24717
Disclosure Date: November 01, 2021 (last updated February 23, 2025)
The AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber roles to enumerate automations, disclose title of private posts or user emails, call functions, or perform privilege escalation via Ajax actions.
0
