Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-25
Automation Web Platform - Security Vulnerability (CVE-2026-14281)
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.6. This is due to missing permission enforcement on the publicly accessible REST route `POST /wp-json/wawp/v1/signup/` and the absence of a key allowlist in the `finish_registration_logic` function, which copies the attacker-controlled `wawp_custom_fields` parameter directly into `update_user_meta()` — allowing sensitive meta keys such as `wp_capabilities` and `wp_user_level` to be set by the caller. This makes it possible for unauthenticated attackers to register a…
PLUGIN
Automation Web Platform
CVE-2026-14281
Risk Score
Threat Entry
Updated 2026-08-24
Automation Web Platform - Authentication Bypass (CVE-2026-77264)
The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 4.8.6. This is due to the handle_email_otp_return() function returning the secret magic login token in the response to a publicly accessible OTP request, rather than only delivering it to the user's email address. This makes it possible for unauthenticated attackers to log in as any user on the site, including administrators, if they know that user's email address.
PLUGIN
Automation Web Platform
CVE-2026-77264
Risk Score
Threat Entry
Updated 2026-06-17
Automation Web Platform - Broken Access Control (CVE-2025-62141)
Missing Authorization vulnerability in Information Technology Wawp automation-web-platform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wawp: from n/a through
PLUGIN
Automation Web Platform
CVE-2025-62141
Risk Score
Threat Entry
Updated 2026-06-17
Automation Web Platform - Authentication Bypass (CVE-2024-52475)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through < 3.0.18.
PLUGIN
Automation Web Platform
CVE-2024-52475
Risk Score