CVE-2026-42775: WordPress AutomatorWP plugin <= 5.7.2 - Cross Site Scripting (XSS) vulnerability
Published Jun 15, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in AutomatorWP <= 5.7.2 versions.
Affected Software
1 affected component
wordpress/automatorwp<=5.7.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/automatorwpto a version that resolves this vulnerability.Fixed in 5.7.3
Event History
Jun 15, 2026
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-42775?
CVE-2026-42775 has a severity rating of 7.1, classifying it as a high-risk vulnerability.
2
What type of vulnerability is CVE-2026-42775?
CVE-2026-42775 is classified as an Unauthenticated Cross Site Scripting (XSS) vulnerability.
3
How can I fix CVE-2026-42775?
To fix CVE-2026-42775, you should update the AutomatorWP plugin to version 5.7.3 or later.
4
What versions are affected by CVE-2026-42775?
CVE-2026-42775 affects all AutomatorWP plugin versions up to and including 5.7.2.
5
Who is vulnerable to CVE-2026-42775?
Any WordPress site using the AutomatorWP plugin version 5.7.2 or earlier is vulnerable to CVE-2026-42775.