Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: PluginEver Clear all filters
TI-2026-83511 CVE-2026-111070 · GHSA-2r7v-fqcv-v2p7

Stored cross-site scripting in Content Pilot WordPress plugin

Priority LOW 24

The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00221 Published 2026-10-31 No fix listed CWE-79
TI-2025-39706 CVE-2025-64263 · GHSA-54g8-cf5m-qwg3

WordPress WP Content Pilot plugin <= 2.1.7 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0021 Published 2025-11-13 No fix listed CWE-862
TI-2025-26106 CVE-2025-39364 · GHSA-9p4p-6vvc-6mcp

WordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PluginEver Product Category Slider for WooCommerce woo-category-slider-by-pluginever allows PHP Loc…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00671 Published 2025-05-19 No fix listed CWE-98
TI-2023-24101 CVE-2023-45053 · GHSA-62rh-q3wq-2pxp

WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability

Priority LOW 20

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue affects WP Content P…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00344 Published 2024-06-04 No fix listed CWE-80