wupsales vulnerabilities
7 published CVEs name wupsales among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-14526
AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route
wupsales · AI Copilot – Content Generator
Critical9.8 - CVE-2026-6639
AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure
wupsales · AI Copilot – Content Generator
High7.5 - CVE-2026-13009
AI Copilot <= 1.5.4 - Authenticated (Subscriber+) SQL Injection via 'order[0][dir]' Parameter
wupsales · AI Copilot – Content Generator
Medium6.5 - CVE-2026-6804
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions
wupsales · AI Copilot – Content Generator
Medium5.3 - CVE-2026-6803
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'
wupsales · AI Copilot – Content Generator
Medium5.3 - CVE-2026-2955
AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header
wupsales · AI Chatbot & Workflow Automation by AIWU
Medium6.4 - CVE-2026-2993
AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()
wupsales · AI Chatbot & Workflow Automation by AIWU
High7.5