Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/10/25 8:29 a.m.3 views

CVE-2025-10902

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aiscanresultremove' function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS5.9AI score0.00034EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/25 8:29 a.m.3 views

CVE-2025-10901

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS5.9AI score0.00041EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.2 views

WordPress plugin Originality.ai AI Checker 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An authorizati...

4.3CVSS6.3AI score0.00034EPSS
Exploits0References3
NVD
NVD
added 2025/10/24 9:15 a.m.2 views

CVE-2025-10901

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS0.00041EPSS
Exploits0References2
CVE
CVE
added 2025/10/24 8:24 a.m.8 views

CVE-2025-10901

CVE-2025-10901 (Originality.ai AI Checker, WordPress) : Wordfence and Patchstack detail a vulnerability in Originality.ai AI Checker plugin for WordPress versions up to and including 1.0.12 where a missing capability check in the function ai_get_table allows authenticated attackers with Subscribe...

4.3CVSS5.9AI score0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/24 8:24 a.m.1 views

EUVD-2025-35809

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS4.6AI score0.00041EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/24 8:24 a.m.5 views

CVE-2025-10901 Originality.ai AI Checker <= 1.0.16 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'aigettable' function in all versions up to, and including, 1.0.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/24 8:24 a.m.2 views

EUVD-2025-35810

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aiscanresultremove' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS4.7AI score0.00034EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/24 8:24 a.m.2 views

CVE-2025-10902 Originality.ai AI Checker <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aiscanresultremove' function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS5.8AI score0.00034EPSS
Exploits0References3
CVE
CVE
added 2025/10/24 8:24 a.m.10 views

CVE-2025-10902

CVE-2025-10902 concerns the WordPress Originality.ai AI Checker plugin (versions up to and including 1.0.12). The issue is a missing capability check in the ai_scan_result_remove function, allowing authenticated attackers with Subscriber-level access or higher to delete all data in the wp_origina...

4.3CVSS5.9AI score0.00034EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/24 8:24 a.m.3 views

CVE-2025-10902 Originality.ai AI Checker <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove'

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'aiscanresultremove' function in all versions up to, and including, 1.0.15. This makes it possible for authenticated attackers, with Subscriber-level access and...

4.3CVSS0.00034EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.2 views

PT-2025-43590

Name of the Vulnerable Software and Affected Versions Originality.ai AI Checker plugin for WordPress versions through 1.0.12 Description The Originality.ai AI Checker plugin for WordPress is susceptible to unauthorized data loss. This is due to a missing capability check within the ai scan result...

4.3CVSS5.9AI score0.00034EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/10/23 10:22 p.m.4 views

WordPress Originality.ai AI Checker plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'ai_get_table' vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure via 'aigettable' vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Originality.ai AI Checker versions = 1.0.12...

4.3CVSS6.3AI score0.00041EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/10/23 10:21 p.m.6 views

WordPress Originality.ai AI Checker plugin <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Scan Log Deletion via ' ai_scan_result_remove' vulnerability

Missing Authorization to Authenticated Subscriber+ Scan Log Deletion via ' aiscanresultremove' vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Originality.ai AI Checker versions = 1.0.12...

4.3CVSS6.7AI score0.00034EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder