PLUGIN SECURITY
Is Gpt3 Ai Content Generator safe?
Chat. Create. Automate.
What this plugin does
- Slug:
gpt3-ai-content-generator - Author: senols
- 10000+ active installs
- 92/100 rating (165 reviews on wordpress.org)
- 2506729 all-time downloads
- On WordPress.org since 2022-12-07
AIAI writerautomationchatbotopenai
Maintenance status
- Latest known version: 2.4.61
- Last updated: 2026-08-21 7:48pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
12 known CVEs on file for Gpt3 Ai Content Generator.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-13362 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 2.3.17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.3.17 | 2.3.17 | 2026-04-30 | ✓ fixed in latest |
| CVE-2025-47470 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.9.15 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.9.15 | 1.9.15 | 2025-05-07 | ✓ fixed in latest |
| CVE-2024-13361 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97 | Missing Authorization | Medium 6.3 | < 1.8.97 | 1.8.97 | 2025-01-21 | ✓ fixed in latest |
| CVE-2024-13360 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97 | Server-Side Request Forgery (SSRF) | Medium 5.4 | < 1.8.97 | 1.8.97 | 2025-01-21 | ✓ fixed in latest |
| CVE-2024-10392 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.90 | Unrestricted Upload of File with Dangerous Type | Critical 9.8 | < 1.8.90 | 1.8.90 | 2024-10-30 | ✓ fixed in latest |
| CVE-2024-37465 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.67 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.8.67 | 1.8.67 | 2024-07-01 | ✓ fixed in latest |
| CVE-2023-51527 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.3 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 5.3 | < 1.8.3 | 1.8.3 | 2023-12-27 | ✓ fixed in latest |
| CVE-2023-51528 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.13 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.8.13 | 1.8.13 | 2023-12-27 | ✓ fixed in latest |
+ 6 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-33999 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.7.40 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.7.40 | 1.7.40 | 2023-07-18 | ✓ fixed in latest |
| CVE-2023-0405 | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.4.38 | Missing Authorization | Medium 4.3 | < 1.4.38 | 1.4.38 | 2023-01-19 | ✓ fixed in latest |
| — | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97 | Deserialization of Untrusted Data | High 7.2 | < 1.8.97 | 1.8.97 | 0000-00-00 | ✓ fixed in latest |
| — | AI Puffer – Chat. Create. Automate. (formerly AI Power) [gpt3-ai-content-generator] < 1.8.97 | Deserialization of Untrusted Data | High 7.2 | < 1.8.97 | 1.8.97 | 0000-00-00 | ✓ fixed in latest |
| CVE-2025-0428 | AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts | — | Unknown | < 1.8.97 | 1.8.97 | — | ✓ fixed in latest |
| CVE-2025-0429 | AI Power: Complete AI Pack < 1.8.97 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms | — | Unknown | < 1.8.97 | 1.8.97 | — | ✓ fixed in latest |
How to fix it
Keep Gpt3 Ai Content Generator updated — 2.4.61 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) — 2000000+ active installs — 94/100 (5201) — max PHP 8.4
- AI Agent by SiteGround — 1000000+ active installs — 30/100 (92) — max PHP <8.0
- Angie – Agentic AI — 100000+ active installs — 60/100 (15) — max PHP 8.4
- AI Engine – The Chatbot, AI Framework & MCP for WordPress — 100000+ active installs — 98/100 (862) — max PHP 8.4
- AI Provider for Anthropic — 50000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.