CVE-2026-78266

Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.

Credits

Ugur Ozer | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/automatorwp/vulnerability/wordpress-automatorwp-plugin-5-8-3-broken-access-control-vulnerability?_s_id=cve