Description
WordPress Plugin WordPress Automatic is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently take over the website and its database. WordPress Plugin WordPress Automatic version 3.53.2 is vulnerable; prior versions are also affected.
Remediation
Update to plugin version 3.53.3 or latest
References
https://blog.nintechnet.com/critical-vulnerability-fixed-in-wordpress-automatic-plugin/
https://codecanyon.net/item/wordpress-automatic-plugin/1904470
Related Vulnerabilities
WordPress Plugin Simple Membership Cross-Site Request Forgery (3.8.4)
WordPress Plugin Login With Ajax Cross-Site Request Forgery (3.0.4.1)
WordPress Plugin Carts Guru PHP Object Injection (1.4.5)
WordPress Plugin WP Video Lightbox Cross-Site Scripting (1.7.4)
WordPress Plugin KJM Admin Notices Cross-Site Scripting (2.0.1)