CVE-2026-56057

34th percentile — higher than 34% of all known CVEs

The Uncanny Automator Pro plugin version 7.3.0.6 and earlier is vulnerable to PHP Object Injection via a Subscriber role. An attacker can remotely execute arbitrary code on the server.

The risk for the organization includes server compromise, data theft, or further propagation of the attack within the internal network.

It is recommended to immediately update the Uncanny Automator Pro plugin to a version newer than 7.3.0.6 and restrict Subscriber user permissions.