Uncanny Automator Pro Vulnerability: Incorrectly Configured Access Control Security Levels Can Be Exploited

CVE-2024-37119

What is CVE-2024-37119?

A missing authorization vulnerability exists in Uncanny Automator Pro, a plugin developed by Uncanny Owl for WordPress. This issue stems from incorrectly configured access control security levels, allowing unauthorized users to exploit the system potentially leading to unwanted license settings changes. It affects versions from n/a through 5.3.0.0, emphasizing the need for website administrators to ensure adequate security measures are in place to mitigate unauthorized access.

References