AIWU vulnerabilities

The AIWU plugin in versions up to and including 1.5.9 contains a privilege escalation vulnerability exploitable by a Subscriber-level user. Only a low-privileged account is required.

Unauthenticated Privilege Escalation vulnerability in AIWU versions up to 1.5.6.

The AIWU content generator plugin contains a blind SQL injection vulnerability in versions up to and including 1.5.4. An attacker can exploit improper neutralization of special elements in SQL commands.

The AIWU WordPress plugin contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions from n/a through 1.4.17.