Plugin icon

AI Puffer – MCP, AI Chatbot & Content Automation

gpt3-ai-content-generator

Vulnerabilities:

14

Last Updated:

October 15, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
AI Puffer < 2.4.90 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action
Fixed in
Fixed in 2.4.90
CVSS
3.1 (low)
Published
2026-10-09
Title
AI Puffer < 2.4.90 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint
Fixed in
Fixed in 2.4.90
CVSS
3.1 (low)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 2.3.17
CVSS
7.1 (high)
Published
2025-05-07
Title
GPT3 AI Content Writer < 1.9.15 - Cross-Site Request Forgery
Fixed in
Fixed in 1.9.15
CVSS
4.3 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Subscriber+) Server-Side Request Forgery
Fixed in
Fixed in 1.8.97
CVSS
5.4 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms
Fixed in
Fixed in 1.8.97
CVSS
7.2 (high)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution
Fixed in
Fixed in 1.8.97
CVSS
6.3 (medium)
Published
2025-01-21
Title
AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts
Fixed in
Fixed in 1.8.97
CVSS
7.2 (high)
Published
2024-10-30
Title
AI Power: Complete AI Pack < 1.8.90 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 1.8.90
CVSS
9.8 (critical)
Published
2024-07-01
Title
GPT3 AI Content Writer < 1.8.67 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.67
CVSS
6.4 (medium)
Published
2023-12-27
Title
AI Power: Complete AI Pack – Powered by GPT-4 < 1.8.3 - Missing Authorization to Sensitive Data Exposure
Fixed in
Fixed in 1.8.3
CVSS
5.3 (medium)
Published
2023-12-27
Title
GPT3 AI Content Writer < 1.8.13 - Cross-Site Request Forgery
Fixed in
Fixed in 1.8.13
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.7.38
CVSS
6.1 (medium)
Published
2023-01-19
Title
GPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content Update
Fixed in
Fixed in 1.4.38
CVSS
5.4 (medium)