pluginever vulnerabilities and threats

Content Pilot – Autoblogging & Affiliate Marketing Suite plugin for WordPress versions up to 2.2.4 is vulnerable to a stored cross-site scripting (XSS) flaw. The vulnerability arises from improper sanitization of HTML meta descriptions extracted from remotely fetched articles, which are then stored and rendered without filtering. This allows unauthenticated attackers controlling RSS feed content to inject malicious scripts that execute when users view the affected pages.

Missing Authorization vulnerability in PluginEver WP Content Pilot wp-content-pilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Content Pilot: from n/a through <= 2.1.7.