Uncanny Automator Pro

Uncanny Automator Pro has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (20%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

Every one of the 5 issues recorded for Uncanny Automator Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Dave Jong.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Uncanny Automator Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-12375

Uncanny Automator Pro 7.3.0.5 - Maliciously Injected Backdoor

Read the full analysis

Vulnerability Records

5 records


2026-06-25 00:00	Uncanny Automator Pro <= 7.3.0.6 - Authenticated (Subscriber+) PHP Object Injection Uncanny Automator Pro <= 7.3.0.6	`CVE-2026-56057`	7.5 High	VanTastic	Yes
2026-06-16 00:00	Uncanny Automator Pro 7.3.0.5 - Maliciously Injected Backdoor Uncanny Automator Pro 7.3.0.5	`CVE-2026-12375`	9.8 Critical	Mike Gozdiskowski	Yes
2024-07-11 00:00	Uncanny Automator Pro <= 5.3 - Reflected Cross-Site Scripting Uncanny Automator Pro <= 5.3	`CVE-2024-37117`	6.1 Medium	Dave Jong	Yes
2024-06-28 00:00	Uncanny Automator Pro < 5.3.0.1 - Missing Authorization to Unauthenticated License Setting Reset Uncanny Automator Pro < 5.3.0.1	`CVE-2024-37119`	5.3 Medium	Dave Jong	Yes
2024-06-28 00:00	Uncanny Automator Pro < 5.3.0.1 - Cross-Site Request Forgery to License Setting Reset Uncanny Automator Pro < 5.3.0.1	`CVE-2024-37118`	4.3 Medium	Dave Jong	Yes

Showing 1–5 of 5 reports