10Web AI Assistant – AI Content Writing Assistant vulnerabilities

1 vulnerability

Known vulnerabilities in 10Web AI Assistant – AI Content Writing Assistant, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2023-698510web10web ai assistant – ai content writing assistant+2
EPSS score
1.35%
The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin AJAX action in all versions up to, and including, 1.0.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins that can be used to gain further access to a compromised site.