WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-content
Published
2024-12-23
Title
Text Prompter – Unlimited chatgpt text prompts for openai tasks < 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ai-content-creator
Published
2025-04-04
Title
AI Content Creator <= 1.2.6 - Cross-Site Request Forgery
Slug
ai-content-generation
Published
2025-01-06
Title
WP Wand < 1.2.6 - Missing Authorization
Slug
ai-content-generation
Published
2026-01-30
Title
WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek <= 1.3.07 - Missing Authorization
Slug
ai-content-generator
Published
2024-11-11
Title
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
ai-content-pipelines
Published
2025-04-04
Title
AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ai-content-writing-assistant
Published
2023-10-03
Title
AI Content Writing Assistant < 1.1.7 - CSRF
Slug
ai-content-writing-assistant
Published
2025-12-31
Title
AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One <= 1.1.7 - Missing Authorization
Slug
ai-copilot
Published
2025-12-31
Title
AI Copilot <= 1.4.7 - Missing Authorization
Slug
ai-engine
Published
2023-05-30
Title
AI-Engine < 1.6.83 - Admin+ Stored XSS
Slug
ai-engine
Published
2024-01-09
Title
AI Engine: ChatGPT Chatbot < 1.9.99 - Unauthenticated Arbitrary File Upload
Slug
ai-engine
Published
2024-01-18
Title
AI Engine < 2.1.5 - Editor+ Arbitrary File Upload via add_image_from_url
Slug
ai-engine
Published
2024-03-01
Title
AI Engine < 2.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
ai-engine
Published
2024-03-26
Title
AI Engine < 2.1.5 - Authenticated (Editor+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-05-07
Title
AI Engine: ChatGPT Chatbot < 2.2.70 - Authenticated (Editor+) Arbitrary File Upload
Slug
ai-engine
Published
2024-07-29
Title
AI Engine < 2.5.1 - Admin+ RCE
Slug
ai-engine
Published
2024-07-22
Title
AI Engine < 2.4.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-08-22
Title
AI Engine < 2.4.8 - Admin+ SQLi
Slug
ai-engine
Published
2024-11-21
Title
AI-Engine < 2.6.5 - Admin+ SQLi
Slug
ai-engine
Published
2025-06-18
Title
AI Engine 2.8.0 - 2.8.3 - Subscriber+ Privilege Escalation via MCP
Slug
ai-engine
Published
2025-07-03
Title
AI Engine 2.8.4 - Insecure OAuth Implementation
Slug
ai-engine
Published
2025-07-07
Title
AI Engine < 2.8.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Slug
ai-engine
Published
2025-07-23
Title
AI Engine < 2.9.5 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Slug
ai-engine
Published
2025-07-30
Title
AI Engine 2.9.3 - 2.9.4 - Subscriber+ Arbitrary File Upload
Slug
ai-engine
Published
2025-09-03
Title
Ai Engine < 2.9.6 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion