Skip to content
OpenAdvisories

Vendor

pluginever

5 known vulnerabilities.

Products

WP Content Pilot 1 Product Category Slider for WooCommerce 1 WC Serial Numbers 1 WP Content Pilot – Autoblogging & Affiliate Marketing Plugin 1 Content Pilot – Autoblogging & Affiliate Marketing Suite 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-111070

    Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`

    The Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2.4. This is due to the plugin extracting the HTML meta description from each remotely-fetched a…

    pluginever Content Pilot – Autoblogging & Affiliate Marketing Suite Web / CMS
  • Medium 5.4
    CVE-2025-64263

    WordPress WP Content Pilot plugin <= 2.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7.

    pluginever WP Content Pilot
  • Medium 4.3
    CVE-2023-45053

    WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin allows Code Injection.This issue affects WP Content Pilot – Autoblogging & Affiliate Marketi…

    pluginever WP Content Pilot – Autoblogging & Affiliate Marketing Plugin
  • Medium 5.4
    CVE-2023-46078

    WordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in PluginEver WC Serial Numbers plugin <= 1.6.3 versions.

    pluginever WC Serial Numbers