51 matches found
CVE-2025-47470
Cross-Site Request Forgery CSRF vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content Writer: from n/a through = 1.9.14...
CVE-2025-47470
CVE-2025-47470 : A CSRF vulnerability exists in the WordPress plugin “GPT3 AI Content Writer” (affected: versions
CVE-2025-47470 WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability
Cross-Site Request Forgery CSRF vulnerability in senols GPT3 AI Content Writer allows Cross Site Request Forgery. This issue affects GPT3 AI Content Writer: from n/a through 1.9.14...
CVE-2025-47470 WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability
Cross-Site Request Forgery CSRF vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content Writer: from n/a through = 1.9.14...
PT-2025-20101 · Unknown · Gpt3 Ai Content Writer
Name of the Vulnerable Software and Affected Versions: GPT3 AI Content Writer versions 1.9.14 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the GPT3 AI Content Writer, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.9.1...
CVE-2024-31351
Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6...
WordPress AI Power: Complete AI Pack plugin <= 1.8.96 - Authenticated (Admin+) PHP Object Injection vulnerability
Authenticated Admin+ PHP Object Injection vulnerability discovered by Tran Anh Duc in WordPress Plugin GPT3 AI Content Writer versions = 1.8.96...
CVE-2024-12156 AI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site Scripting
The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for...
WordPress GPT3 AI Content Writer Plugin <= 1.8.89 is vulnerable to Arbitrary File Upload
Software GPT3 AI Content Writer Type Plugin Vulnerable versions = 1.8.89 Fixed in 1.8.90 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-10392 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 7f062ed6d685 Credits vgo0 Required privilege...
CVE-2024-5969
The AIomatic - Automatic AI Content Writer for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 2.0.5. This is due to insufficient limitations on the email recipient and the content in the 'aiomaticsendemail' function which are reachable via AJAX...
CVE-2024-37465 WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a through 1.8.66...
CVE-2024-37465 WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a through 1.8.66...
CVE-2024-37465
CVE-2024-37465 is a Stored XSS vulnerability in the WordPress plugin GPT3 AI Content Writer (also listed as AI Power: Complete AI Pack). Affected versions are up to 1.8.66 and exploitation requires authenticated access (Contributor+). The issue is fixed in a patched release; upgrade to the latest...
WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin GPT3 AI Content Writer versions = 1.8.66...
WordPress GPT3 AI Content Writer Plugin <= 1.8.66 is vulnerable to Cross Site Scripting (XSS)
Software GPT3 AI Content Writer Type Plugin Vulnerable versions = 1.8.66 Fixed in 1.8.67 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37465 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 1398a1f33d9c Credits LVT-tholv2k Required privileg...
CVE-2024-35716
Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9...
CVE-2024-35716
Technical details about CVE-2024-35716 are not publicly provided in the supplied documents. No product/version/root-cause/impact/fix information is available here. Monitor for updates from vendors and threat intel feeds.
WordPress Copymatic – AI Content Writer & Generator Plugin <= 1.9 is vulnerable to Broken Access Control
Software Copymatic – AI Content Writer & Generator Type Plugin Vulnerable versions = 1.9 Fixed in 2.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-35716 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID acafd07bdb00 Credits...
CVE-2024-31351
Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6...
WordPress Copymatic – AI Content Writer & Generator Plugin <= 1.6 is vulnerable to Arbitrary File Upload
Software Copymatic – AI Content Writer & Generator Type Plugin Vulnerable versions = 1.6 Fixed in 1.7 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-31351 Patch priority High CVSS severity High 10 Developer Claim ownership PSID aae3946a50f0 Credits Francois Harvey...