EUVD-2026-65173
GHSA-ffx7-p465-qvwr
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Subscriber-level authentication required (PR:L); network-accessible endpoint, no complexity; integrity-only impact with no data exposure or availability loss.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Lifecycle Timeline
1DescriptionCVE.org
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
AnalysisAI
Broken access control in AutomatorWP WordPress plugin (versions ≤ 5.8.3) allows authenticated subscriber-level users to perform privileged operations without authorization. Subscribers - the lowest authenticated role in WordPress - can invoke plugin functionality reserved for editors or administrators, resulting in high integrity impact against affected sites. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid subscriber-level (or higher) WordPress account on a site running AutomatorWP ≤ 5.8.3 with the plugin active. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, score 6.5 Medium) indicates the vulnerability is network-exploitable with low complexity, requiring only a subscriber-level authenticated session and no user interaction. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker navigates to a target WordPress site running AutomatorWP ≤ 5.8.3 with open registration enabled, self-registers a free subscriber account, and authenticates. Using knowledge of the vulnerable plugin endpoint (discoverable via source code review or fuzzing), the attacker submits a crafted authenticated HTTP request that bypasses the missing authorization check, triggering or modifying automation recipes - potentially altering site content, dispatching unauthorized notifications to connected services, or manipulating plugin-connected workflow logic. … |
| Remediation | The primary remediation is to update AutomatorWP beyond version 5.8.3; the exact confirmed fixed version should be verified against the Patchstack advisory at https://patchstack.com/database/wordpress/plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-8-3-broken-access-control-vulnerability prior to deployment, as the patched release version is not independently specified in available intelligence. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Automatorwp
View allThe AutomatorWP WordPress plugin before 1.7.6 does not perform capability checks which allows users with Subscriber role
Unauthenticated stored/reflected cross-site scripting in the AutomatorWP WordPress plugin (versions <= 5.6.7) allows rem
Reflected/stored Cross-Site Scripting in the WordPress plugin AutomatorWP versions 5.7.2 and earlier allows unauthentica
Broken authentication in the AutomatorWP WordPress plugin versions 5.6.7 and earlier allows authenticated users with low
Cross-Site Request Forgery (CSRF) vulnerability in AutomatorWP plugin <= 2.5.0 leads to object delete. Rated medium seve
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today