Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: aitool Clear all filters
TI-2025-11146 CVE-2025-12156 · GHSA-rhxj-9r87-4xrm

Missing authorization in aitool Ai Auto Tool Content Writing Assistant All in One

Priority LOW 19

The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_post_data() function i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00195 Published 2025-11-04 No fix listed CWE-862
TI-2025-36482 CVE-2025-58829 · GHSA-pc74-v89m-r259

Server-side request forgery in aitool Ai Auto Tool Content Writing Assistant All in One

Priority LOW 22

Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One ai-auto-tool allows Server Side Request Forgery.This issue affects Ai Auto Tool Conte…

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00184 Published 2025-09-05 No fix listed CWE-918
TI-2025-22727 CVE-2025-31564 · GHSA-x8c8-54jh-wpc2

SQL injection in aitool Ai Auto Tool Content Writing Assistant All in One

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One ai-auto-tool allows Blind SQL Injec…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00471 Published 2025-04-01 No fix listed CWE-89
TI-2024-36394 CVE-2024-54306 · GHSA-f3hq-gxw2-6xpg

Cross-site request forgery in aitool AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best…

Priority LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in aitool AIKCT Engine Chatbot, ChatGPT, Gemini, GPT-4o Best AI Chatbot ai-seo-translator allows Cross Site Request Forgery.This issue affects AIKCT Engine Chatbot, ChatGPT…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00233 Published 2024-12-13 No fix listed CWE-352
TI-2024-35054 CVE-2024-52383 · GHSA-g652-g2hq-7whv

WordPress Ai Auto Tool Content Writing Assistant plugin <= 2.1.2 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One ai-auto-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2024-11-14 No fix listed CWE-862