CVE-2025-10901

11th percentile - higher than 11% of all known CVEs

The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ai_get_table' function in all versions up to and including 1.0.16. An authenticated attacker with Subscriber-level access and above can read all data in the wp_originalityai_log database table, which can include post titles, scan scores, credits used, and other data.

An attacker with low privileges can access sensitive information stored in the database, potentially leading to privacy breaches and data exposure. All installations with the vulnerable plugin version are at risk.

Update the Originality.ai AI Checker plugin to the latest version that fixes the vulnerability. If updating is not possible, consider disabling the plugin or restricting site access.