Ai Co Pilot For Wp Vulnerabilities

[en] Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through 1.2.7.

Affected:

up to 1.2.7

Fix:

No patched version reported

Disclosed:

Dec 18, 2025

CVE-2025-62998 on NVD →

[en] Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.

Affected:

up to 1.2.7

Fix:

No patched version reported

Disclosed:

Dec 9, 2025

CVE-2025-62994 on NVD →

The WP AI CoPilot – AI content writer plugin, ChatGPT WordPress, GPT-3/4 , Ai assistance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive use...

CVSS:

4.3

Affected:

up to 1.2.7

Fixed in:

1.2.8

Disclosed:

Dec 8, 2025

CVE-2025-62998 on NVD →

The WP AI CoPilot – AI content writer plugin, ChatGPT WordPress, GPT-3/4 , Ai assistance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive use...

CVSS:

4.3

Affected:

up to 1.2.7

Fixed in:

1.2.8

Disclosed:

Dec 4, 2025

CVE-2025-62994 on NVD →