Read the docs

wupsales

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

wupsales records in CISA KEV

No wupsales vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-05826 CVE-2026-6639 · GHSA-8mpj-5qhw-h3qv

Missing authorization in wupsales AI Copilot – Content Generator

Priority MEDIUM 43

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01989 Published 2026-08-05 No fix listed CWE-862
TI-2026-02582 CVE-2026-2993 · GHSA-8wr2-c6vh-58c4

AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()

Priority LOW 39

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4.17 due to insufficient escaping on user supplied parameters and lack of sufficient pr…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00413 Published 2026-05-12 No fix listed CWE-89
TI-2026-05968 CVE-2026-6804 · GHSA-62q4-whmm-v2fm

Missing authorization in wupsales AI Copilot – Content Generator

Priority LOW 31

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00561 Published 2026-07-11 No fix listed CWE-862
TI-2026-05967 CVE-2026-6803 · GHSA-cvg5-h6q6-299w

Missing authorization in wupsales AI Copilot – Content Generator

Priority LOW 31

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.12.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00516 Published 2026-07-11 No fix listed CWE-862
TI-2026-11067 CVE-2026-13009 · GHSA-8vrq-qfj7-frhg

AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter

Priority LOW 29

The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied p…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00451 Published 2026-07-23 No fix listed CWE-89
TI-2026-02547 CVE-2026-2955 · GHSA-8cp2-f533-qp29

Cross-site scripting in wupsales AI Chatbot & Workflow Automation by AIWU

Priority LOW 28

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1.4.14 due to insufficient input sanitizat…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00223 Published 2026-05-20 No fix listed CWE-79
Open these records in search →