WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-quiz
Published
2024-11-22
Title
AI Quiz <= 1.1 - Missing Authorization
Slug
ai-quiz
Published
2024-12-05
Title
AI Quiz | Quiz Maker <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
ai-related-products
Published
2025-09-26
Title
Smart Related Products <= 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ai-responsive-gallery-album
Published
2024-11-18
Title
AI Responsive Gallery Album <= 1.4 - Reflected Cross-Site Scripting
Slug
ai-responsive-gallery-album
Published
2025-01-16
Title
AI Responsive Gallery Album <= 1.4 - Missing Authorization
Slug
ai-scribe-the-chatgpt-powered-seo-content-creation-wizard
Published
2025-01-08
Title
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) < 2.6 - Cross-Site Request Forgery to Settings Update
Slug
ai-scribe-the-chatgpt-powered-seo-content-creation-wizard
Published
2025-01-09
Title
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) < 2.6 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
ai-scribe-the-chatgpt-powered-seo-content-creation-wizard
Published
2025-01-09
Title
AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) < 2.6 - Authenticated (Contributor+) SQL Injection
Slug
ai-seo-translator
Published
2024-12-11
Title
AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot < 1.6.3 - Cross-Site Request Forgery via update_integration_option
Slug
ai-site-builder
Published
2024-12-11
Title
Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation
Slug
ai-text-to-speech
Published
2025-04-17
Title
AI Text to Speech < 3.0.4 - Missing Authorization
Slug
ai-twitter-feeds
Published
2024-03-29
Title
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ai-workflow-automation-lite
Published
2026-02-27
Title
AI Workflow Automation <= 1.4.2 - Missing Authorization
Slug
ai-wp-writer
Published
2024-03-28
Title
AI WP Writer < 3.6.5.6 - Missing Authorization
Slug
ai-wp-writer
Published
2025-01-06
Title
AI WP Writer < 3.8.4.5 - Cross-Site Request Forgery
Slug
aibuddy-openai-chatgpt
Published
2025-07-03
Title
AiBud WP <= 1.9 - Admin+ Arbitrary File Upload
Slug
aibuddy-openai-chatgpt
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
aicomments
Published
2024-12-11
Title
AIcomments < 1.4.2 - Cross-Site Request Forgery
Slug
aiify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
aikit-wordpress-ai-writing-assistant-using-gpt3
Published
2024-04-09
Title
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Slug
aiktp
Published
2026-01-23
Title
AIKTP < 5.0.05 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
Slug
aimogen-pro
Published
2026-03-19
Title
Aimogen Pro < 2.7.6 - Unauthenticated Privilege Escalation via Arbitrary Function Call
Slug
aio-contact
Published
2024-12-02
Title
AIO Contact <= 2.8.1 - Missing Authorization
Slug
aio-contact
Published
2024-12-02
Title
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
Slug
aio-shortcodes
Published
2024-12-30
Title
Best WordPress Shortcode Plugin in 2025 – AIO Shortcodes < 1.3.1 - Unauthenticated Stored Cross-Site Scripting