GCVE - cpe:2.3:a:wp_brutal_ai_project:wp_brutal

Approved changes feed: RSS · Atom

cpe:2.3:a:wp_brutal_ai_project:wp_brutal_ai:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Wp Brutal Ai Project (`37e2b28c-8808-5137-af4f-da4539debaf3`)
Product	Wp Brutal Ai (`837b3d16-d600-56dd-83ec-83fb38ae2a56`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-2605`	vulnerable	2026-06-08 06:02:42.620577	WP Brutal AI < 2.0.1 - Admin+ Reflected XSS The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin. Published: 2023-06-27T13:17:26.709Z Updated: 2025-02-13T16:44:45.276Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/372cb940-71ba-4d19-b35a-ab15f8c2fdeb http://packetstormsecurity.com/files/173734/WordPress-WP-Brutal-AI-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2601`	vulnerable	2026-06-08 06:02:42.611527	WP Brutal AI < 2.0.0 - SQL Injection via CSRF The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin via CSRF. Published: 2023-06-27T13:17:12.040Z Updated: 2025-02-13T16:44:40.908Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/57769468-3802-4985-bf5e-44ec1d59f5fd http://packetstormsecurity.com/files/173732/WordPress-WP-Brutal-AI-Cross-Site-Request-Forgery-SQL-Injection.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.