CVE-2024-31351_wordpress_exploit

WordPress - Copymatic – AI 内容写作与生成器 = 1.6 - 未认证任意文件上传 CVE-2024-31351 Copymatic Copymatic – AI 内容写作与生成器存在危险类型文件无限制上传漏洞。此漏洞影响 Copymatic – AI 内容写作与生成器：从 n/a 到 1.6 版本。 欲获取更多漏洞利用程序及独家内容，请通过 Telegram 联系我 @KtN1990。 使用方法 运行此漏洞利用程序需要安装 Python 3 并准备网站列表，然后执行： root@kitploit: python3 exploit.py -l list.txt -...

📄 WordPress Copymatic 1.6 Unauthenticated Shell Upload

WordPress Copymatic plugin version 1.6 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the...

EUVD-2025-21837

Malicious code in bioql PyPI...

EUVD-2024-35474

Malicious code in bioql PyPI...

CVE-2025-6781

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the 'copymatic-menu' page. This makes it possible for unauthenticated attackers to upda...

CVE-2025-6781

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the 'copymatic-menu' page. This makes it possible for unauthenticated attackers to upda...

CVE-2025-6781

CVE-2025-6781 affects the Copymatic – AI Content Writer & Generator WordPress plugin (versions ≤ 2.1). The issue is a Cross-Site Request Forgery on the copymatic-menu page, allowing unauthenticated attackers to update the copymatic_apikey option if a site administrator is tricked into performing ...

CVE-2025-6781 Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the 'copymatic-menu' page. This makes it possible for unauthenticated attackers to upda...

CVE-2025-6781 Copymatic – AI Content Writer & Generator <= 2.1 - Cross-Site Request Forgery to Settings Update

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the 'copymatic-menu' page. This makes it possible for unauthenticated attackers to upda...

WordPress Copymatic plugin <= 2.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Jonas Benjamin Friedli in WordPress Plugin Copymatic versions = 2.1...

WordPress plugin Copymatic – AI Content Writer & Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-6781: Cross-Site Request Forgery (CSRF)

The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the 'copymatic-menu' page. This makes it possible for unauthenticated attackers to upda...

PT-2025-29989 · WordPress · Copymatic – Ai Content Writer & Generator

Name of the Vulnerable Software and Affected Versions: Copymatic – AI Content Writer & Generator plugin for WordPress versions up to and including 2.1 Description: The Copymatic – AI Content Writer & Generator plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or...

CVE-2024-35716

Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9...

CVE-2024-31351

Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6...

Copymatic – AI Content Writer & Generator < 2.0 - Missing Authorization

Description The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the copymaticimportarticle function in versions up to, and including, 1.9. This makes it possible for authenticated attackers, wit...

CVE-2024-35716

Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9...

CVE-2024-35716

Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9...

CVE-2024-35716 WordPress Copymatic plugin <= 1.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.9...

CVE-2024-35716

Technical details about CVE-2024-35716 are not publicly provided in the supplied documents. No product/version/root-cause/impact/fix information is available here. Monitor for updates from vendors and threat intel feeds.