Vulnerabilities and security researches forai-auto-tool ai-auto-tool

Nov 11, 2025

CVE, Research URL: CVE-2025-12156
Home page URL: Security reports for Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Application: Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Date: Nov 04, 2025
Research Description: The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_post_data() function in versions 2.0.7 to 2.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create and publish arbitrary posts.
Affected versions: max 2.0.7.
Status: vulnerable

Sep 07, 2025

CVE, Research URL: CVE-2025-58829
Home page URL: Security reports for Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Application: Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Date: Sep 05, 2025
Research Description: Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Server Side Request Forgery. This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.2.6.
Affected versions: max 2.2.6.
Status: vulnerable

Apr 03, 2025

CVE, Research URL: CVE-2025-31564
Home page URL: Security reports for Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Application: Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Date: Apr 02, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Blind SQL Injection. This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.1.7.
Affected versions: max 2.1.7.
Status: vulnerable

Nov 15, 2024

CVE, Research URL: CVE-2024-52383
Home page URL: Security reports for Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Application: Ai Auto Tool Content Writing Assistant (Bard Writer, ChatGPT ) All in One
Date: Nov 14, 2024
Research Description: Missing Authorization vulnerability in KCT Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.1.2.
Affected versions: max 2.1.3.
Status: vulnerable