Skip to content
PluginCanary

Uncanny Automator

Uncanny Automator - Claude & ChatGPT MCP Server with MCP for AI Automation
by Uncanny Owl · 40,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 195 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Uncanny Automator
Ownership100
Maintenance100
Security50
SupportNo data
Reputation75

How the score works

Quick answers

Is Uncanny Automator still maintained?
Yes. Last release 4 Nov 2026, 195 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns Uncanny Automator, and has it changed hands?
No change recorded. Main committer uncannyowl since Apr 2020. 5 Nov 2026 · SVN log
Was Uncanny Automator removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is Uncanny Automator safe?
16 known vulnerabilities, all fixed (latest in 7.7.0). Not on the exploited list. 7 Oct 2026 · Wordfence Intelligence
Is the latest Uncanny Automator update safe to install?
No ownership change before 8.0.1. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master7 Apr 2020 to 7 Apr 2020, 1 commits
uncannyowl14 Apr 2020 to 4 Nov 2026, 460 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
today
Releases, 24 months
195
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Uncanny Automator
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 2025132
Q2 20250
Q3 20250
Q4 202523
Q1 20260
Q2 20261
Q3 202636
Q4 20263

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (5 reviews). Lifetime: 4.9.

Average rating per quarter for Uncanny Automator
Q2 20245.0
Q3 20245.0
Q4 20244.2
Q1 20255.0
Q2 20255.0
Q3 20254.7
Q4 20255.0
Q1 20263.0
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q2 2024 and Q3 2026.

Rating distribution
5 star151
4 star2
3 star0
2 star1
1 star3
Latest low reviews

Security record

14 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 7.7.0).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
7 Oct 2026Uncanny Automator - AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion7.5<= 7.6.1.17.7.0Patched before disclosure
27 Jul 2026Uncanny Automator <= 7.3.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Integration Metadata Disclosure via Multiple AJAX Endpoints7.5<= 7.3.27.4.0Patched before disclosure
22 Jul 2026Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.2 - Authenticated (Administrator+) SQL Injection4.9<= 7.3.27.4.0Patched before disclosure
15 Jul 2026Uncanny Automator <= 7.3.1.4 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via Forminator Submitted-Field Token8.1<= 7.3.1.47.4.0Patched before disclosure
23 Jun 2026Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.3.1.2 - Unauthenticated PHP Object Injection8.1<= 7.3.1.27.3.1.322
2 Mar 2026Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 7.0.0.3 - Authenticated (Administrator+) Server-Side Request Forgery to Arbitrary File Upload7.2<= 7.0.0.37.1.0134
22 Jan 2026Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.10.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 6.10.0.27.0.0173
7 Nov 2025Uncanny Automator < 6.10.0 - Authenticated (Subscriber+) Information Exposure4.3< 6.10.06.10.0250
27 Aug 2025Uncanny Automator <= 6.7.0.1 - Missing Authorization4.3<= 6.7.0.16.8.080
2 Jun 2025Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.4.0.2 - Missing Authorization6.5<= 6.4.0.26.5.0166
13 May 2025Uncanny Automator <= 6.4.0.1 - Unauthenticated PHP Object Injection in automator_api_decode_message Function9.1<= 6.4.0.16.4.0.2186
9 May 2025Uncanny Automator <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update5.4<= 6.4.0.26.5.0190
3 Apr 2025Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8<= 6.3.0.26.4.0n/a
11 Mar 2025Uncanny Automator - Easy Automation, Integration, Webhooks & Workflow Builder Plugin <= 6.2 - Authenticated (Admin+) Server-Side Request Forgery via Webhook5.5<= 6.26.3249
28 Dec 2023Uncanny Automator <= 5.1.0.2 - Sensitive Information Exposure via Log File5.3<= 5.1.0.25.1.0.3446
24 May 2023Uncanny Automator <= 4.14 - Cross-Site Request Forgery via update_automator_connect5.4< 4.154.15664

Changelog mentions of security fixes: 7.4.0 (security, XSS, authorization, nonce); 7.4.1 (security, nonce); 8.0.1 (authorization); 7.5.0.1 (security); 7.5.1 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 3 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Uncanny Automator
4 May 202617,160
11 May 20267,029
18 May 20266,538
25 May 20263,203
1 Jun 202630,404
8 Jun 202636,337
15 Jun 202621,039
22 Jun 202622,307
29 Jun 202622,000
6 Jul 20267,829
13 Jul 202623,241
20 Jul 20266,436
27 Jul 202620,536
3 Aug 202650,909
10 Aug 202629,013
17 Aug 20269,770
24 Aug 202620,293
31 Aug 202636,274
7 Sep 20265,818
14 Sep 20265,895
21 Sep 20264,020
28 Sep 202618,813
5 Oct 202610,103
12 Oct 202617,791
19 Oct 20268,022
26 Oct 20266,800
2 Nov 2026669

Weekly downloads over the last 4 weeks are 50% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Automattic For Agencies ClientScore 100 · 20,000+Legal Text Connector of the IT-RechtScore 98 · 10,000+Thrive AutomatorScore 98 · 10,000+AyeCode ConnectScore 96 · 10,000+Unbounce Landing PagesScore 96 · 10,000+

Facts

Version8.0.1
AuthorUncanny Owl
Added14 Apr 2020
Last updated4 Nov 2026
Active installs40,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping
TagsAI, Claude, ChatGPT, automation, mcp-server

Other plugins by this author: Uncanny Toolkit for LearnDash

Questions

Is Uncanny Automator still maintained?

Yes. Last release 4 Nov 2026, 195 releases in the last 24 months.

Who owns Uncanny Automator, and has it changed hands?

No change recorded. Main committer uncannyowl since Apr 2020.

Was Uncanny Automator removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is Uncanny Automator safe?

16 known vulnerabilities, all fixed (latest in 7.7.0). Not on the exploited list.

Is the latest Uncanny Automator update safe to install?

No ownership change before 8.0.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue