Threats tagged 'ghsa-rhxj-9r87-4xrm'

The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT) All in One plugin for WordPress versions 2.0.7 to 2.2.6 contains a vulnerability allowing authenticated users with Subscriber-level access or higher to modify data without proper authorization. This is due to a missing capability check in the save_post_data() function, enabling such users to create and publish arbitrary posts.