PT-2025-43589 · WordPress · Originality.Ai Ai Checker

Published 2025-10-24 · Updated 2025-10-24 · CVE-2025-10901

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Originality.ai AI Checker plugin for WordPress versions up to and including 1.0.12

Description The Originality.ai AI Checker plugin for WordPress is susceptible to unauthorized data access. This is due to a missing capability check within the ai get table() function. Authenticated attackers with Subscriber-level access or higher can read all data from the wp originalityai log database table. This data includes post titles, scan scores, and credits used.

Recommendations Update the Originality.ai AI Checker plugin for WordPress to a version beyond 1.0.12.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-10901

Affected Products

Originality.Ai Ai Checker

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-10901 · Security Note
• https://twitter.com/VulmonFeeds/status/1981689233518555592 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/9bf94803-1ddf-4b9b-9624-497db455aab2?source=cve · Note
• https://twitter.com/CVEnew/status/1981643762888499444 · Twitter Post
• https://t.me/cveNotify/140139 · Telegram Post
• https://t.me/CVEtracker/35647 · Telegram Post
• https://plugins.trac.wordpress.org/browser/originality-ai/trunk/OriginalityAILogger.php#L202 · Note