WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-seo-translator
Published
2024-12-11
Title
AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot < 1.6.3 - Cross-Site Request Forgery via update_integration_option
Slug
ai-share-summarize
Published
2026-06-03
Title
AI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode Attribute
Slug
ai-site-builder
Published
2024-12-11
Title
Zita Site Builder <= 1.0.2 - Missing Authorization to Arbitrary Plugin Installation
Slug
ai-text-to-speech
Published
2025-04-17
Title
AI Text to Speech < 3.0.4 - Missing Authorization
Slug
ai-twitter-feeds
Published
2024-03-29
Title
AI Twitter Feeds (Twitter widget & shortcode) <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ai-workflow-automation-ai-agent-hub
Published
2026-09-24
Title
MCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST Route
Slug
ai-workflow-automation-ai-agent-hub
Published
2026-09-24
Title
MCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership Check
Slug
ai-workflow-automation-ai-agent-hub
Published
2026-09-24
Title
MCP Server for WordPress < 1.8.2 - Administrator Account Creation via CSRF
Slug
ai-workflow-automation-lite
Published
2026-02-27
Title
AI Workflow Automation < 2.0.4 - Missing Authorization
Slug
ai-wp-writer
Published
2024-03-28
Title
AI WP Writer < 3.6.5.6 - Missing Authorization
Slug
ai-wp-writer
Published
2025-01-06
Title
AI WP Writer < 3.8.4.5 - Cross-Site Request Forgery
Slug
aibuddy-openai-chatgpt
Published
2025-07-03
Title
AiBud WP <= 1.9 - Admin+ Arbitrary File Upload
Slug
aibuddy-openai-chatgpt
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
aicomments
Published
2024-12-11
Title
AIcomments < 1.4.2 - Cross-Site Request Forgery
Slug
aiify
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
aikit-wordpress-ai-writing-assistant-using-gpt3
Published
2024-04-09
Title
AIKit <= 4.14.1 - Authenticated (Contributor+) SQL Injection
Slug
aiktp
Published
2026-01-23
Title
AIKTP < 5.0.05 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrator Actions
Slug
aimogen-pro
Published
2026-03-19
Title
Aimogen Pro < 2.7.6 - Unauthenticated Privilege Escalation via Arbitrary Function Call
Slug
aimogen-pro
Published
2026-07-09
Title
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit < 2.8.3.1 - Unauthenticated Arbitrary File Upload
Slug
aimogen-pro
Published
2026-07-13
Title
Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit < 2.8.5 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'
Slug
aio-contact
Published
2024-12-02
Title
AIO Contact <= 2.8.1 - Missing Authorization
Slug
aio-contact
Published
2024-12-02
Title
AIO Contact <= 2.8.1 - Unauthenticated Stored Cross-Site Scripting
Slug
aio-shortcodes
Published
2024-12-30
Title
Best WordPress Shortcode Plugin in 2025 – AIO Shortcodes < 1.3.1 - Unauthenticated Stored Cross-Site Scripting
Slug
aio-time-clock-lite
Published
2022-11-30
Title
All in One Time Clock Lite < 1.3.321 - Admin+ Stored XSS
Slug
aio-time-clock-lite
Published
2025-04-24
Title
All in One Time Clock Lite < 1.3.326 - Cross-Site Request Forgery