CVE Database /
CVE-2025-58193
CVE · Medium
CVE-2025-58193 — Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT [uncanny-automator] < 6.8.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-58193
|
Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT [uncanny-automator] < 6.8.0 |
Missing Authorization |
Medium
4.3
|
< 6.8.0
|
6.8.0 |
2025-08-27 |
—
|
CVE-2025-58193
A flaw exists in the Uncanny Automator plugin for WordPress, allowing users with Subscriber-level access or higher to execute a specific function without proper authorization checks being performed. This vulnerability affects all versions of the plugin up to 6.7.0.1, potentially enabling malicious actors to carry out unauthorized actions within the affected system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings