Wp Content Pilot Vulnerabilities

The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an un...

CVSS:

4.3

Affected:

up to 2.1.7

Fixed in:

2.1.8

Disclosed:

Nov 8, 2025

CVE-2025-64263 on NVD →

The WP Content Pilot plugin for WordPress is vulnerable to Arbitrary Content Injection in versions up to, and including, 1.3.3. This vulnerability makes it possible for authenticated attackers, with contributor access or higher to inject new content onto the website, possibly through the manipulation of posts to create...

CVSS:

4.3

Affected:

up to 1.3.3

Fixed in:

1.3.4

Disclosed:

Oct 3, 2023

CVE-2023-45053 on NVD →