Vulnerabilidades do Aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: 1 registro(s), com versões afetadas e correções.
CVE-2025-12156
Média · 4.3
CWE-862 04/11/2025
Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One 2.0.7 - 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation
The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_post_data() function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create and publish arbitrary posts.