Server-Side Request Forgery Vulnerability in Ai Auto Tool Content Writing Assistant by Aitool
CVE-2025-58829

4.9MEDIUM

Key Information:

Vendor

WordPress
Status
Ai Auto Tool Content Writing Assistant (gemini Writer, Chatgpt ) All In One
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58829?

A critical vulnerability exists in the Ai Auto Tool Content Writing Assistant, allowing malicious actors to exploit Server-Side Request Forgery (SSRF) mechanisms. This flaw can lead to unauthorized access to internal systems or sensitive data through crafted requests, compromising the system's integrity. Users are encouraged to review and update their installations to protect against potential exploits.

Affected Version(s)

Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One <= 2.2.6

References

https://patchstack.com/database/wordpress/plugin/ai-auto-...
vdb-entry

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
JSON
.