PatchSiren cyber security CVE debrief
CVE-2026-42775 Ruben Garcia CVE debrief
CVE-2026-42775 is a HIGH severity Unauthenticated Cross Site Scripting (XSS) vulnerability in AutomatorWP plugin versions <= 5.7.2. The vulnerability has a CVSS score of 7.1 and was published on [cvePublishedAt](https://www.cve.org/CVERecord?id=CVE-2026-42775).
- Vendor
- Ruben Garcia
- Product
- AutomatorWP
- CVSS
- HIGH 7.1
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-15
- Original CVE updated
- 2026-06-15
- Advisory published
- 2026-06-15
- Advisory updated
- 2026-06-15
Who should care
Administrators and users of AutomatorWP plugin versions <= 5.7.2 should be aware of this vulnerability and take necessary actions to mitigate it.
Technical summary
The vulnerability is caused by an unauthenticated cross-site scripting (XSS) issue in the AutomatorWP plugin. The CVSS vector for this vulnerability is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L.
Defensive priority
HIGH
Recommended defensive actions
- Update AutomatorWP plugin to a version greater than 5.7.2.
- Refer to [ref-4](https://patchstack.com/database/wordpress/plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve) for mitigation or vendor reference.
Evidence notes
The vulnerability was reported by [email protected] and has a CWE-79 weakness.
Official resources
-
CVE-2026-42775 CVE record
CVE.org
-
CVE-2026-42775 NVD detail
NVD
-
Source item URL
nvd_modified
- Mitigation or vendor reference
CVE-2026-42775 was published on 2026-06-15T21:16:57.353Z and modified on 2026-06-15T21:24:32.790Z.