PLUGIN SECURITY

Is Writesonic safe?

Writesonic is an AI writing tool that generates high-quality articles, blog posts, landing pages, Google & Facebook ads, emails, and more in seconds.

What this plugin does

  • Slug: writesonic
  • Author: Writesonic
  • 1000+ active installs
  • 30065 all-time downloads
  • On WordPress.org since 2022-05-21

AI copywritingAI writerAI writinganalyticswritesonic

Maintenance status

  • Latest known version: 1.0.6
  • Last updated: 2026-08-13 8:14am GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 7.4+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Writesonic. Reported between 2025 and 2025.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-53262 Writesonic [writesonic] < 1.0.6 Cross-Site Request Forgery (CSRF) Medium 5.4 < 1.0.6 1.0.6 2025-06-27 ✓ fixed in latest

How to fix it

Keep Writesonic updated — 1.0.6 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.