CVE Intelligence
Analysis AI-assisted

CVE-2026-56057: Uncanny Automator Pro PHP Object Injection via Subscriber Role

CVE-2026-56057 is a PHP Object Injection vulnerability (CWE-502) affecting Uncanny Automator Pro versions up to and including 7.3.0.6, as reported by Patchstack. The record assigns a CVSS 3.1 base score of 9.8 with a network attack vector and no privileges required, and the CVE is not listed in CISA KEV. Fixed versions and affected version ranges are not provided in the available sources.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-56057 describes a PHP Object Injection weakness, classified as CWE-502 (Deserialization of Untrusted Data), in the Uncanny Automator Pro WordPress plugin. The record states that the issue affects versions up to and including 7.3.0.6 and that it can be triggered by a user holding the Subscriber role. The CNA is Patchstack.

Impact

  • The CVSS 3.1 vector reported in the record is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which corresponds to a base score of 9.8 (critical).
  • Deserialization of untrusted data can, in general, lead to unexpected object behavior; the specific impact in this plugin is not detailed in the available record.

Affected products and versions

  • Product: Uncanny Automator Pro (WordPress plugin).
  • Versions: up to and including 7.3.0.6, according to the record.
  • The affected version list in the structured data is empty, so the exact range should be confirmed with the vendor or the Patchstack entry.

Exploitation status

The CISA KEV catalog does not list this CVE in the sources consulted. No confirmed exploitation in the wild appears in the sources consulted. EPSS reports a probability of 0.00564 with a percentile of 0.45332.

Remediation and mitigation

  • Identify whether Uncanny Automator Pro is installed and which version is in use.
  • Check the vendor or the Patchstack database entry for a fixed release, since the record does not list one.
  • Restrict account creation and review Subscriber-level accounts, since the record indicates low privilege is sufficient.
  • Apply vendor updates once a fixed version is confirmed.

Detection guidance

  • Review web server and application logs for unusual requests to the plugin around the publication date.
  • Monitor for unexpected changes in site content or plugin behavior tied to user-submitted data.

Limitations of the available information

The record has no fixed version, no affected version list, and no vendor advisory beyond the Patchstack reference. The title field is empty in the source. Specific vulnerable code paths and proof-of-concept details are not part of this analysis.

Frequently asked questions

What is CVE-2026-56057?

It is a PHP Object Injection vulnerability (CWE-502) in Uncanny Automator Pro up to and including version 7.3.0.6, reported by Patchstack.

Is this vulnerability being actively exploited?

The CVE is not listed in CISA KEV, and no confirmed exploitation in the wild appears in the sources consulted.

Is a fixed version available?

The record does not list a fixed version. Check the vendor or Patchstack entry for remediation details.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.