The AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress is vulnerable to unauthorized access and modification of data due a missing capability check on multiple plugin's functions all versions up to, including, 5.3.7. This makes it possible authenticated attackers, with Subscriber-level above, modify integration settings or view existing automations.