plugin

Quickcreator Vulnerabilities

1 known security issue reported for the Quickcreator WordPress plugin. Most recent disclosed Oct 23, 2025.

1 high

Running Quickcreator on your site? Check whether your installed version is affected.

Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure

high

The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupasrala.txt file. This makes it possible for unauthenticated attackers to view the plugin's API key and subsequently use that to perform actio...

CVSS:: 7.5
Affected:: 0.0.9 – 0.1.17
Fixed in:: 0.1.18
Disclosed:: Oct 23, 2025

CVE-2025-11504 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database