Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Brutal AI 2.0.0

  • Severity: high-risk
  • Status: Fixed
  • Publication: June 5, 2023

The WP Brutal AI plugin for WordPress is vulnerable to a security issue known as an SQL Injection. This vulnerability is found in versions of the plugin before 2.0.0 and is caused by the plugin not properly protecting user input and not having enough measures in place to prevent malicious requests. This means that authenticated users with administrator-level permissions as well as unauthenticated users who are able to trick a WordPress administrator into clicking a link can use this vulnerability to get sensitive information from the database.

Detected in:

WP Brutal AI fixed vulnerable versions: >= * < 2.0.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.