Description (CNA)
The uncanny-automator-pro WordPress plugin before 7.3.0.6 was distributed with malicious code after the vendor's uncanny-automator-pro WordPress plugin before 7.3.0.6 update/distribution infrastructure was compromised; the injected backdoor grants unauthenticated attackers an administrator session on affected sites and beacons the site's secret keys and administrator details to attacker-controlled servers.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / uncanny-automator-pro | affected 7.3.0.5 before 7.3.0.6 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.