Ai Scribe The Chatgpt Powered Seo Content Creation Wizard Vulnerabilities

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.5 due t...

CVSS:

6.5

Affected:

up to 2.5

Fixed in:

2.6

Disclosed:

Jan 9, 2025

CVE-2024-12473 on NVD →

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including...

CVSS:

4.3

Affected:

up to 2.5

Fixed in:

2.6

Disclosed:

Jan 9, 2025

CVE-2024-12606 on NVD →

The AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5. This is due to missing or incorrect nonce validation on the "al_scribe_c...

CVSS:

4.3

Affected:

up to 2.5

Fixed in:

2.6

Disclosed:

Jan 8, 2025

CVE-2024-12605 on NVD →