CVE-2026-76057

Name of the Vulnerable Software and Affected Versions AutomatorWP versions prior to 5.8.5

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated users with subscriber-level access or higher can retrieve all ConvertKit form data configured by the site manager, exposing sensitive integration details. This is achieved via the automatorwp convertkit get forms AJAX action. The required nonce, a security token used to prevent cross-site request forgery, is localized on every admin page load and is accessible to any authenticated user who can reach the /wp-admin endpoint.

Recommendations Update to a version newer than 5.8.4.