Plugin icon

AI Puffer – Your AI engine for WordPress (formerly AI Power)

gpt3-ai-content-generator

Vulnerabilities:

11

Last Updated:

March 8, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-05-07
Title
GPT3 AI Content Writer < 1.9.15 - Cross-Site Request Forgery
Fixed in
Fixed in 1.9.15
CVSS
4.3 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Fixed in
Fixed in 1.8.97
CVSS
6.3 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Fixed in
Fixed in 1.8.97
CVSS
7.2 (high)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Subscriber+) Server-Side Request Forgery
Fixed in
Fixed in 1.8.97
CVSS
5.4 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
Fixed in
Fixed in 1.8.97
CVSS
7.2 (high)
Published
2024-10-30
Title
AI Power: Complete AI Pack < 1.8.90 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.8.90
CVSS
9.8 (critical)
Published
2024-07-01
Title
GPT3 AI Content Writer < 1.8.67 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.67
CVSS
6.4 (medium)
Published
2023-12-27
Title
GPT3 AI Content Writer < 1.8.13 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.13
CVSS
4.3 (medium)
Published
2023-12-27
Title
AI Power: Complete AI Pack – Powered by GPT-4 < 1.8.3 - Missing Authorization to Sensitive Data Exposure
Fixed in
Fixed in 1.8.3
CVSS
5.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.38
CVSS
6.1 (medium)
Published
2023-01-19
Title
GPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content Update
Fixed in
Fixed in 1.4.38
CVSS
5.4 (medium)