A vulnerability labeled as problematic has been found in Uncanny Automator Plugin up to 6.10.0.2 on WordPress. This issue affects the function automator_discord_user_mapping of the component Shortcode Handler. Executing a manipulation of the argument verified_message can lead to cross site scripting.

This vulnerability appears as CVE-2025-15522. The attack may be performed from remote. There is no available exploit.