Advisories · Technology
wupsales AI Copilot – Content Generator.
Every CVE that names wupsales AI Copilot – Content Generator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route
- wupsales AI Copilot – Content Generator
- Privilege escalation
- CVSS 7.5 High
AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure
- wupsales AI Copilot – Content Generator
- Broken access control
- CVSS 6.5 Medium
AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter
- wupsales AI Copilot – Content Generator
- SQL injection
- CVSS 5.3 Medium
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions
- wupsales AI Copilot – Content Generator
- Broken access control
- CVSS 5.3 Medium
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'
- wupsales AI Copilot – Content Generator
- Broken access control