Read the docs

Wp Brutal Ai Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Brutal Ai Project records in CISA KEV

No Wp Brutal Ai Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Brutal Ai 2 records HIGH

Records

2 records

TI-2023-02431 CVE-2023-2601 · GHSA-3rqp-wp5p-mhrc

WP Brutal AI < 2.0.0 - SQL Injection via CSRF

Priority HIGH 82

The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0176 Published 2023-06-27 Fixed in 2.0.0
TI-2023-02435 CVE-2023-2605 · GHSA-qpmh-7vpm-353g

WP Brutal AI < 2.0.1 - Admin+ Reflected XSS

Priority MEDIUM 60

The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privil…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00544 Published 2023-06-27 Fixed in 2.0.1
Open these records in search →