CVE-2026-120846: WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The available data indicates the vulnerability is remotely exploitable without authentication or user interaction. An attacker does not need prior privileges to attempt exploitation.

Q: What security impact is reported?

The reported impact is integrity-related: an attacker may be able to modify information or actions permitted by the improperly configured access control. No confidentiality or availability impact is listed.

Q: Which plugin versions are affected?

Uncanny Automator versions through 7.7.1 are affected. The provided data does not identify a fixed version.

Published Nov 3, 2026

Updated

Missing Authorization vulnerability in Uncanny Owl Uncanny Automator uncanny-automator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Automator: from n/a through 7.7.1.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/uncanny-automator to a version that resolves this vulnerability.
Fixed in 8.0.0

Event History

Nov 3, 2026

CVE Published

via MITRE·04:44 PM

Data Sourced

via MITRE·04:44 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The available data indicates the vulnerability is remotely exploitable without authentication or user interaction. An attacker does not need prior privileges to attempt exploitation.

What security impact is reported?

The reported impact is integrity-related: an attacker may be able to modify information or actions permitted by the improperly configured access control. No confidentiality or availability impact is listed.

Which plugin versions are affected?

Uncanny Automator versions through 7.7.1 are affected. The provided data does not identify a fixed version.

CVE-2026-120846: WordPress Uncanny Automator plugin <= 7.7.1 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What security impact is reported?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What security impact is reported?

Which plugin versions are affected?