PT-2025-52272 · WordPress · Wp Ai Copilot

Benzdeus · CVE-2025-62998 · Published 2025-12-18 · Updated 2025-12-18

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WP AI CoPilot versions through 1.2.7

Description A flaw exists in WP Messiah WP AI CoPilot that allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data.

Recommendations Update WP AI CoPilot to a version later than 1.2.7.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2025-62998

Affected Products

Wp Ai Copilot

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62998 · Security Note
• https://vdp.patchstack.com/database/wordpress/plugin/ai-co-pilot-for-wp/vulnerability/wordpress-wp-ai-copilot-plugin-1-2-7-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001728008286277821 · Twitter Post
• https://t.me/CVEtracker/40168 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/ai-co-pilot-for-wp/vulnerability/wordpress-wp-ai-copilot-plugin-1-2-7-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/ai-co-pilot-for-wp/vulnerability/wordpress-wp-ai-copilot-plugin-1-2-7-sensitive-data-exposure-vulnerability?_s_id=cve · Note