CVE-2026-40785

HighCVSS 7.1

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

30th percentile - higher than 30% of all known CVEs

AutomatorWP versions up to 5.6.7 have a vulnerability in subscriber authentication, which may lead to unauthorized access.

Organizations may be exposed to unauthorized user actions, potentially resulting in data loss or privacy breaches.

It is recommended to update AutomatorWP to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Broken Authentication in AutomatorWP <= 5.6.7 versions.