WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-builder
Published
2026-09-09
Title
AI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScript
Slug
ai-co-pilot-for-wp
Published
2025-12-04
Title
AI CoPilot < 1.2.8 - Authenticated (Contributor+) Information Exposure
Slug
ai-co-pilot-for-wp
Published
2025-12-08
Title
AI CoPilot < 1.2.8 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
ai-contact-us
Published
2023-04-23
Title
AI Contact Us Form <= 1.0 - Admin+ Stored XSS
Slug
ai-content
Published
2024-12-23
Title
Text Prompter – Unlimited chatgpt text prompts for openai tasks < 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ai-content-creator
Published
2025-04-04
Title
AI Content Creator <= 1.2.6 - Cross-Site Request Forgery
Slug
ai-content-generation
Published
2025-01-06
Title
WP Wand < 1.2.6 - Missing Authorization
Slug
ai-content-generation
Published
2026-01-30
Title
WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek <= 1.3.07 - Missing Authorization
Slug
ai-content-generator
Published
2024-11-11
Title
Sage AI: Chatbots, OpenAI GPT-4 Bulk Articles, Dalle-3 Image Generation <= 2.4.9 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
ai-content-generator-marketing
Published
2026-10-09
Title
AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion
Slug
ai-content-pipelines
Published
2025-04-04
Title
AI Content Pipelines <= 1.6 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
ai-content-writing-assistant
Published
2023-10-03
Title
AI Content Writing Assistant < 1.1.7 - CSRF
Slug
ai-content-writing-assistant
Published
2025-12-31
Title
AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One <= 1.1.7 - Missing Authorization
Slug
ai-copilot
Published
2025-12-31
Title
AI Copilot <= 1.4.7 - Missing Authorization
Slug
ai-copilot-content-generator
Published
2026-05-11
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.8 - Unauthenticated SQL Injection in getListForTbl()
Slug
ai-copilot-content-generator
Published
2026-05-19
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.15 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header
Slug
ai-copilot-content-generator
Published
2026-06-01
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.19 - Unauthenticated Privilege Escalation
Slug
ai-copilot-content-generator
Published
2026-06-26
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth
Slug
ai-copilot-content-generator
Published
2026-07-10
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions
Slug
ai-copilot-content-generator
Published
2026-07-09
Title
AI Copilot – Content Generator < 1.5.5 - Unauthenticated SQL Injection
Slug
ai-copilot-content-generator
Published
2026-07-10
Title
AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'
Slug
ai-copilot-content-generator
Published
2026-07-22
Title
AI Copilot < 1.5.8 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter
Slug
ai-copilot-content-generator
Published
2026-08-04
Title
AI Chatbot & Workflow Automation by AIWU < 1.4.19 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Slug
ai-copilot-content-generator
Published
2026-08-07
Title
AI Copilot – Content Generator < 1.5.8 - Unauthenticated Privilege Escalation via Custom Workflow Route
Slug
ai-copilot-content-generator
Published
2026-10-06
Title
AI Copilot – Content Generator <= 1.5.9 - Authenticated (Subscriber+) Privilege Escalation