Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: kekotron Clear all filters
TI-2024-10855 CVE-2024-11709 · GHSA-qxr2-7v5g-f58p

AI Post Generator | AutoWriter <= 3.5 - Missing Authorization to Authenticated (Contributor+) Post/Page Deletion

Priority LOW 20

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ai_post_generator_delete_Post AJAX action in all versions up to, and inc…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00363 Published 2024-12-12 No fix listed CWE-862
TI-2024-10489 CVE-2024-11323 · GHSA-qf2h-jc2c-h8mw

AI Quiz | Quiz Maker <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The AI Quiz | Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ai_quiz_update_style() function in all versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00431 Published 2024-12-06 No fix listed CWE-862
TI-2024-35906 CVE-2024-53708 · GHSA-fv8r-92cq-fm95

WordPress AI Quiz plugin <= 1.1 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in kekotron AI Quiz ai-quiz allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects AI Quiz: from n/a through <= 1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00552 Published 2024-12-02 No fix listed CWE-862
TI-2024-01722 CVE-2024-1850 · GHSA-jcrv-j83j-p76q

AI Post Generator | AutoWriter <= 3.3 - Missing Authorization

Priority LOW 29

The AI Post Generator | AutoWriter plugin for WordPress is vulnerable to unauthorized access, modification or deletion of posts due to a missing capability check on functions hooked by AJAX actions in all versions up to,…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00515 Published 2024-04-09 No fix listed CWE-862