WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-engine
Published
2026-06-25
Title
AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR
Slug
ai-engine
Published
2026-07-30
Title
AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens
Slug
ai-engine
Published
2026-07-31
Title
AI Engine < 3.6.6 - Administrator Account Creation via CSRF
Slug
ai-engine
Published
2026-08-03
Title
AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie
Slug
ai-engine
Published
2026-07-28
Title
AI Engine < 3.6.9 - Unauthenticated Stored XSS
Slug
ai-engine
Published
2026-08-03
Title
AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription
Slug
ai-engine
Published
2026-08-19
Title
AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools
Slug
ai-engine
Published
2026-08-24
Title
AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant
Slug
ai-engine
Published
2026-08-24
Title
AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter
Slug
ai-engine-pro
Published
2026-03-28
Title
AI Engine (Pro) < 3.4.2 - Missing Authorization
Slug
ai-feeds
Published
2025-11-25
Title
AI Feeds < 1.0.12 - Unauthenticated Arbitrary File Upload
Slug
ai-feeds
Published
2025-12-11
Title
AI Feeds < 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aife_post_meta' Shortcode
Slug
ai-for-seo
Published
2025-01-06
Title
AI for SEO < 1.2.10 - Missing Authorization
Slug
ai-for-seo
Published
2026-08-07
Title
SOOZ – AI for SEO – Bulk Generate Focus Keyphrases, Metadata, Alt Text (SEO Autopilot) < 2.4.3 - Missing Authorization
Slug
ai-image
Published
2024-11-11
Title
Instant Image Generator < 1.5.3 - Unauthenticated Arbitrary File Upload
Slug
ai-image
Published
2026-07-08
Title
Instant AI Image Generator – Create & Import Images < 2.1.5 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-image-alt-text-generator-for-wp
Published
2025-01-30
Title
Ai Image Alt Text Generator for WP < 1.0.7 - Reflected Cross-Site Scripting
Slug
ai-image-alt-text-generator-for-wp
Published
2025-04-04
Title
Ai Image Alt Text Generator for WP < 1.1.2 - Missing Authorization
Slug
ai-image-alt-text-generator-for-wp
Published
2025-04-04
Title
Ai Image Alt Text Generator for WP <= 1.1.9 - Subscriber+ Sensitive Information Exposure
Slug
ai-image-alt-text-generator-for-wp
Published
2025-08-23
Title
Ai Image Alt Text Generator for WP < 1.1.6 - Missing Authorization
Slug
ai-image-alt-text-generator-for-wp
Published
2026-01-20
Title
Ai Image Alt Text Generator for WP <= 1.1.9 - Missing Authorization
Slug
ai-image-generator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ai-image-generator-lab
Published
2025-06-13
Title
AI Image Lab – Free AI Image Generator <= 1.0.6 - Cross-Site Request Forgery to API Key Update
Slug
ai-moderator-for-buddypress-and-buddyboss
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ai-mojo
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius