Vulnerabilities / Content Pilot
Content Pilot vulnerabilities
Advisories WPSec published for Content Pilot – Autoblogging & Affiliate Marketing Suite. Other sources may list more. Its attack surface: Content Pilot on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-19 | WPSEC-2026-1242 | Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Imported Post Content | Medium 5.4 | 2.2.5 |
| 2026-10-19 | WPSEC-2026-1241 | Content Pilot <= 2.2.4 - Authenticated (Contributor+) Missing Authorization to Campaign Configuration and Campaign Data Deletion | Medium 6.4 | 2.2.5 |
License: CC BY 4.0