Vulnerabilities > WP Brutal AI Project

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-27	CVE-2023-2601	Unspecified vulnerability in WP Brutal AI Project WP Brutal AI The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF. network low complexity wp-brutal-ai-project critical	9.8
2023-06-27	CVE-2023-2605	Unspecified vulnerability in WP Brutal AI Project WP Brutal AI 2.0.0 The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin. network low complexity wp-brutal-ai-project	6.1

Vulnerabilities > WP Brutal AI Project {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"WP Brutal AI Project"}]}