Description
The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automator_google_contacts_fetch_labels, automator_mautic_segment_fetch, automator_mautic_tags_fetch, and automator_mautic_render_contact_fields AJAX actions due to a missing capability check and missing nonce verification in the corresponding handlers (ajax_fetch_labels, segments_fetch, tags_fetch, and render_contact_fields). This makes it possible for authenticated attackers, with Subscriber-level access and above, to enumerate sensitive Google Contacts groups/labels and Mautic segments, tags, and contact-field definitions retrieved via integration credentials configured by an administrator, and to consume third-party API quota.
Published: 2026-07-28
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/google-contacts/google-contacts-integration.php#L70 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/google-contacts/helpers/google-contacts-helper.php#L113 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/mautic/helpers/mautic-app-helpers.php#L199 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/mautic/helpers/mautic-app-helpers.php#L250 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/mautic/helpers/mautic-app-helpers.php#L302 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.2.1/src/integrations/mautic/mautic-integration.php#L60 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/google-contacts/google-contacts-integration.php#L70 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/google-contacts/helpers/google-contacts-helper.php#L113 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/mautic/helpers/mautic-app-helpers.php#L199 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/mautic/helpers/mautic-app-helpers.php#L250 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/mautic/helpers/mautic-app-helpers.php#L302 cve-icon
https://plugins.trac.wordpress.org/browser/uncanny-automator/tags/7.3.1.4/src/integrations/mautic/mautic-integration.php#L60 cve-icon
https://plugins.trac.wordpress.org/changeset?reponame=&old=3607785%40uncanny-automator&new=3607785%40uncanny-automator cve-icon
https://www.wordfence.com/threat-intel/vulnerabilities/id/1bfa1538-7722-458d-a6a5-adde03e21e1a?source=cve cve-icon
History

Tue, 28 Jul 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Uncannyowl
Uncannyowl uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Wordpress
Wordpress wordpress
Vendors & Products Uncannyowl
Uncannyowl uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Wordpress
Wordpress wordpress

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.3.2 via the automator_google_contacts_fetch_labels, automator_mautic_segment_fetch, automator_mautic_tags_fetch, and automator_mautic_render_contact_fields AJAX actions due to a missing capability check and missing nonce verification in the corresponding handlers (ajax_fetch_labels, segments_fetch, tags_fetch, and render_contact_fields). This makes it possible for authenticated attackers, with Subscriber-level access and above, to enumerate sensitive Google Contacts groups/labels and Mautic segments, tags, and contact-field definitions retrieved via integration credentials configured by an administrator, and to consume third-party API quota.
Title Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Uncannyowl Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin
Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2026-07-28T13:27:18.525Z

Reserved: 2026-07-08T01:19:36.329Z

Link: CVE-2026-15025

cve-icon Vulnrichment

Updated: 2026-07-28T13:27:14.503Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-28T19:15:03Z

Weaknesses