A vulnerability labeled as problematic has been found in Uncanny Automator Plugin up to 6.10.0.2 on WordPress. This issue affects the function
automator_discord_user_mapping of the component Shortcode Handler. Executing a manipulation of the argument verified_message can lead to cross site scripting.
This vulnerability appears as CVE-2025-15522. The attack may be performed from remote. There is no available exploit.