WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-auto-tool
Published
2025-09-05
Title
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One < 2.4.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-auto-tool
Published
2025-11-03
Title
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Post Creation
Slug
ai-botkit-for-lead-generation
Published
2026-01-06
Title
AI BotKit < 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
ai-co-pilot-for-wp
Published
2025-12-04
Title
AI CoPilot < 1.2.8 - Authenticated (Contributor+) Information Exposure
Slug
ai-co-pilot-for-wp
Published
2025-12-08
Title
AI CoPilot < 1.2.8 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
ai-contact-us
Published
2023-04-23
Title
AI Contact Us Form <= 1.0 - Admin+ Stored XSS
Slug
ai-content
Published
2024-12-23
Title
Text Prompter – Unlimited chatgpt text prompts for openai tasks < 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ai-content-creator
Published
2025-04-04
Title
AI Content Creator <= 1.2.6 - Cross-Site Request Forgery
Slug
ai-content-generation
Published
2025-01-06
Title
WP Wand < 1.2.6 - Missing Authorization
Slug
ai-content-generation
Published
2026-01-30
Title
WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek <= 1.3.07 - Missing Authorization
Slug
ai-content-generator
Published
2024-11-11
Title
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
ai-content-pipelines
Published
2025-04-04
Title
AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ai-content-writing-assistant
Published
2023-10-03
Title
AI Content Writing Assistant < 1.1.7 - CSRF
Slug
ai-content-writing-assistant
Published
2025-12-31
Title
AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One <= 1.1.7 - Missing Authorization
Slug
ai-copilot
Published
2025-12-31
Title
AI Copilot <= 1.4.7 - Missing Authorization
Slug
ai-copilot-content-generator
Published
2026-05-11
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.8 - Unauthenticated SQL Injection in getListForTbl()
Slug
ai-copilot-content-generator
Published
2026-05-19
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.15 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header
Slug
ai-copilot-content-generator
Published
2026-06-01
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.19 - Unauthenticated Privilege Escalation
Slug
ai-copilot-content-generator
Published
2026-06-26
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth
Slug
ai-copilot-content-generator
Published
2026-07-10
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions
Slug
ai-copilot-content-generator
Published
2026-07-09
Title
AI Copilot – Content Generator < 1.5.5 - Unauthenticated SQL Injection
Slug
ai-copilot-content-generator
Published
2026-07-10
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'
Slug
ai-copilot-content-generator
Published
2026-07-22
Title
AI Copilot < 1.5.8 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter
Slug
ai-copilot-content-generator
Published
2026-08-04
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.19 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
ai-copilot-content-generator
Published
2026-08-07
Title
AI Copilot – Content Generator < 1.5.8 - Unauthenticated Privilege Escalation via Custom Workflow Route