WordPress plugin

Content Pilot – Autoblogging & Affiliate Marketing Suite security & vulnerabilities

wp-content-pilot— active installsLast vulnerability Oct 30, 2026

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical0
High0
Medium3
Low0

Vulnerabilities per year

All Content Pilot – Autoblogging & Affiliate Marketing Suite vulnerabilities

Content Pilot – Autoblogging & Affiliate Marketing Suite vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.4	Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">` ≤2.2.4Update to 2.2.5	CVE-2026-111070	Oct 30
Medium4.3	Missing Authorization ≤2.1.7Update to 2.1.8	CVE-2025-64263	Nov 8, 2025
Medium4.3	Authenticated (Contributor+) Content Injection ≤1.3.3Update to 1.3.4	CVE-2023-45053	Oct 3, 2023

Medium5.4
Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`
≤2.2.4Update to 2.2.5
CVE-2026-111070Oct 30
Medium4.3
Missing Authorization
≤2.1.7Update to 2.1.8
CVE-2025-64263Nov 8, 2025
Medium4.3
Authenticated (Contributor+) Content Injection
≤1.3.3Update to 1.3.4
CVE-2023-45053Oct 3, 2023

Content Pilot – Autoblogging & Affiliate Marketing Suite: common questions

Does Content Pilot – Autoblogging & Affiliate Marketing Suite have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Content Pilot – Autoblogging & Affiliate Marketing Suite: 3 medium. None are known to affect version null.

How do I check which version of Content Pilot – Autoblogging & Affiliate Marketing Suite I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Content Pilot – Autoblogging & Affiliate Marketing Suite vulnerability?

CVE-2026-111070, published Oct 30, 2026: Content Pilot <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via RSS-linked article `<meta name="description">`. Severity: Medium (CVSS 5.4).

Is any Content Pilot – Autoblogging & Affiliate Marketing Suite vulnerability listed in CISA KEV?

No. None of the known Content Pilot – Autoblogging & Affiliate Marketing Suite vulnerabilities is currently listed in the CISA KEV catalog.