Automatic vulnerabilities

2 known vulnerabilities in Automatic from WP Automatic. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Automatic: Cross-Site Request Forgery

  CVE-2024-27955May 17, 2024WP Automatic

  Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects Automatic: from n/a through 3.92.0.

• 9.3 Critical severity

  Automatic: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-27954May 17, 2024WP AutomaticEPSS 73%

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Automatic Automatic allows Path Traversal, Server Side Request Forgery.This issue affects Automatic: from n/a through 3.92.0.