CVE-2026-12375
Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server
CVSS Score
9.8
EPSS Score
0.1%
EPSS Percentile
4th
The uncanny-automator-pro WordPress plugin before 7.3.0.6 was distributed with malicious code after the vendor's uncanny-automator-pro WordPress plugin before 7.3.0.6 update/distribution infrastructure was compromised; the injected backdoor grants unauthenticated attackers an administrator session on affected sites and beacons the site's secret keys and administrator details to attacker-controlled servers.
| Vendor | unknown |
| Product | uncanny-automator-pro |
| Published | Jul 7, 2026 |
| Last Updated | Jul 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown uncanny-automator-pro
Be the first to know when new critical vulnerabilities affecting unknown uncanny-automator-pro are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / uncanny-automator-pro
7.3.0.5 < 7.3.0.6
References
Credits
Mike Gozdiskowski WPScan