| CVE-2024-13672 | Mini Course Generator | Embed mini-courses and interactive content <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | minicoursegenerator | Mini Course Generator | Embed mini-courses and interactive content | Medium | 6.4 | 2025-02-21 03:21:21 | Deep Dive |
| CVE-2025-23571 | WordPress Internal Links Generator plugin <= 3.51 - Reflected Cross Site Scripting (XSS) vulnerability | makong | Internal Links Generator | High | 7.1 | 2025-02-14 12:44:29 | Deep Dive |
| CVE-2025-24569 | WordPress PDF Generator Addon for Elementor Page Builder plugin <= 1.7.5 - Arbitrary File Read vulnerability | RedefiningTheWeb | PDF Generator Addon for Elementor Page Builder | High | 7.5 | 2025-02-03 14:22:47 | Deep Dive |
| CVE-2025-24597 | WordPress Barcode Generator for WooCommerce plugin <= 2.0.2 - Sensitive Data Exposure vulnerability | Dmitry V. (CEO of "UKR Solution") | Barcode Generator for WooCommerce | Medium | 6.5 | 2025-01-31 08:24:40 | Deep Dive |
| CVE-2024-12177 | Ai Image Alt Text Generator for WP <= 1.0.6 - Reflected Cross-Site Scripting | wpmessiah | Ai Image Alt Text Generator for WP | Medium | 6.1 | 2025-01-30 13:42:05 | Deep Dive |
| CVE-2024-13052 | Dental Optimizer Patient Generator App <= 1.0 - Reflected XSS | Unknown | Dental Optimizer Patient Generator App | 高危 | - | 2025-01-27 06:00:09 | Deep Dive |
| CVE-2024-10705 | Multiple Page Generator Plugin – MPG <= 4.0.5 - Authenticated (Editor+) Server-Side Request Forgery via fileUrl | themeisle | Multiple Page Generator Plugin – MPG | Medium | 5.4 | 2025-01-26 06:41:22 | Deep Dive |
| CVE-2025-24713 | WordPress Button Generator – easily Button Builder Plugin <= 3.1.1 - Cross Site Request Forgery (CSRF) vulnerability | Wow-Company | Button Generator – easily Button Builder | Medium | 5.4 | 2025-01-24 17:25:06 | Deep Dive |
| CVE-2025-23954 | WordPress Salvador – AI Image Generator plugin <= 1.0.11 - Broken Access Control vulnerability | awcode | Salvador – AI Image Generator | Medium | 4.3 | 2025-01-16 20:08:09 | Deep Dive |
| CVE-2025-23864 | WordPress WCS QR Code Generator plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability | Luke America | WCS QR Code Generator | Medium | 6.5 | 2025-01-16 20:07:31 | Deep Dive |
| CVE-2025-23831 | WordPress QR Code Generator plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability | mobstac | QR Code Generator | Medium | 6.5 | 2025-01-16 20:07:19 | Deep Dive |
| CVE-2024-12473 | AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Authenticated (Contributor+) SQL Injection | opacewebdesign | Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic | Medium | 6.5 | 2025-01-10 03:21:30 | Deep Dive |
| CVE-2024-12606 | AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Missing Authorization to Authenticated (Subscriber+) Settings Update | opacewebdesign | Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic | Medium | 4.3 | 2025-01-10 03:21:30 | Deep Dive |
| CVE-2024-12605 | AI Scribe – SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) <= 2.5 - Cross-Site Request Forgery to Settings Update | opacewebdesign | Opace AI Scribe: SEO Content Creator & Humaizer for OpenAI & Anthropic | Medium | 4.3 | 2025-01-09 11:10:58 | Deep Dive |
| CVE-2024-12471 | Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload | postsaint | Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator | High | 8.8 | 2025-01-07 05:23:58 | Deep Dive |
| CVE-2024-56253 | WordPress Data Tables Generator by Supsystic plugin <= 1.10.36 - Broken Access Control vulnerability | supsystic | Data Tables Generator by Supsystic | Medium | 5.4 | 2025-01-02 12:01:25 | Deep Dive |
| CVE-2024-12636 | Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages <= 3.2.7 - Cross-Site Request Forgery | wplegalpages | Privacy Policy Generator – WPLP Legal Pages | Medium | 4.3 | 2024-12-25 04:22:04 | Deep Dive |
| CVE-2024-55999 | WordPress XML Multilanguage Sitemap Generator plugin <= 2.0.6 - Broken Access Control vulnerability | Marco Giannini | XML Multilanguage Sitemap Generator | Medium | 5.3 | 2024-12-16 15:53:55 | Deep Dive |
| CVE-2024-54364 | WordPress Feedpress Generator plugin <= 1.2.1 - Reflected Cross Site Scripting (XSS) vulnerability | spartac | Feedpress Generator | High | 7.1 | 2024-12-16 14:31:35 | Deep Dive |
| CVE-2024-55978 | WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability | WalletStation | Code Generator Pro | Critical | 9.3 | 2024-12-16 14:31:21 | Deep Dive |