CVE Database /
CVE-2024-13838
CVE · Medium
CVE-2024-13838 — Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included [uncanny-automator] < 6.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-13838
|
Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included [uncanny-automator] < 6.3 |
Server-Side Request Forgery (SSRF) |
Medium
5.5
|
< 6.3
|
6.3 |
2025-03-11 |
—
|
CVE-2024-13838
The Uncanny Automator plugin for WordPress versions 6.2 and earlier contains a server-side request forgery vulnerability in the 'call_webhook' method of the Automator_Send_Webhook class. Administrators and higher-level users can exploit this flaw to send web requests from the server to arbitrary destinations, potentially allowing them to access or alter data on internal services. The vulnerability was patched in version 6.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings