AutomatorWP Missing Authorization Vulnerability Allowing Data Modification

A vulnerability exists in the AutomatorWP WordPress plugin, specifically in versions through 5.3.7, due to a lack of proper capability checks on several functions. This flaw enables authenticated users with Subscriber-level access or higher to unauthorizedly access and alter integration settings or view existing automations.

Impact

Exploitation of this vulnerability allows for unauthorized access to and modification of integration settings and automations by users with Subscriber-level access or higher.

Remediation

Users are advised to update the AutomatorWP plugin to version 5.3.8 or a newer patched version.