WP Wand – AI Content Writer for OpenAI, Claude, Gemini, OpenRouter and Deepseek
WP Wand – AI Content Writer for OpenAI, Claude, Gemini, OpenRouter and Deepseek has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 4.8, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
2 independent researchers contributed these findings, one record each. WP Wand – AI Content Writer for OpenAI, Claude, Gemini, OpenRouter and Deepseek is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-25391WP Wand – Unlimited Content Generation using AI – for OpenAI, Claude, Openrouter and Deepseek <= 1.3.07 - Missing Authorization
Read the full analysisVulnerability Records

WP Wand – AI Content Writer for OpenAI, Claude, Gemini, OpenRouter and Deepseek
Author
WP Grids
WP Wand writes content inside WordPress using your own API key. Connect OpenAI, Anthropic (Claude), Google Gemini, OpenRouter or Deepseek, pick a template, and the draft lands in the editor you’re already working in — Gutenberg, Classic or Elementor. There’s no WP Wand subscription. You pay your AI provider directly for what you use, at their rates, and you can switch models whenever you like. What the free plugin gives you 44 prompt templates. All of them free, no template is locked. The AI Assistant on every WordPress admin screen, plus Gutenberg, Classic Editor and Elementor. Single generations with no cap — run as many as your provider key will allow. Bulk Posts: 5 runs per 30 days, up to 10 posts a run. So up to 50 posts a month. Automation: 5 scheduled runs per 30 days, up to 5 posts a run. AI image generation with an OpenAI key, at 256×256. 43 output languages, and any model your key can reach. What needs WP Wand Pro Custom prompt templates, AI Character, business-details and target-customer training, the Rank Math and Yoast SEO panels, the WooCommerce product-editor integration, generation history, larger AI images, auto fallback to a second provider, and higher Bulk and Automation limits. White labelling comes with the Agency plan. About One Click Blog Post Give it a topic and it writes a complete first draft — roughly 2,000 words, in about two to three minutes, depending on the model you chose. It’s a first draft, not a finished post. Read it, fix what’s wrong, then publish. Official Site Get WP Wand Pro Pro Support Watch: writing a full blog post Watch: generating posts in bulk Watch: adding to or rewriting existing content with the AI Assistant Watch: writing a WooCommerce product description Watch: generating content inside Elementor Watch: setting up white label Watch: what WP Wand does Supported AI Models When you save a key, WP Wand reads the model list from that provider account, so you get exactly the models your key can reach. If the list can’t be fetched, it falls back to a built-in set. OpenAI GPT-5 GPT-4.1 Mini ChatGPT 4o Latest GPT-4o Mini GPT-4o Plus any other text model on your account Anthropic (Claude) Claude 4 Opus Claude 4 Sonnet Claude 3.5 Haiku Plus any other model on your account Google Gemini Gemini 3.7 Flash Gemini 3.5 Flash Lite Gemini 2.5 Pro Gemini 2.5 Flash Plus any other Gemini model on your key Deepseek DeepSeek Chat DeepSeek Reasoner (R1) OpenRouter All text models are supported. CORE FEATURES Free No monthly WP Wand subscription — you bring your own API key Unlimited single generations 44 prompt templates, none of them locked AI Assistant on every admin screen AI for Gutenberg, Classic Editor and Elementor Bulk Post Generation — 5 runs of up to 10 posts, per 30 days Scheduled post Automation — 5 runs per 30 days, up to 5 posts a run Connect OpenRouter in one click — no API key to copy and paste AI image generation with an OpenAI key, at 256×256 OpenAI, Claude, Gemini, OpenRouter and Deepseek support Pick whichever model your key can reach 43 output languages Works with your existing theme and plugins WP Wand Pro Create your own prompt templates Custom AI Character Business details and target-customer profile, fed into every template One click WooCommerce description writer inside the product editor Integrated with Rank Math — beta Integrated with Yoast SEO — beta Generation history Larger AI images: 512×512 and 1024×1024 Higher Bulk and Automation limits Auto fallback: when one provider account runs dry, carry on with the next one you listed (off until you turn it on) Agency plan White label WP Wand with your own name, logo and colours ALL 44 TEMPLATES Headline Generation Paragraph Related to Headline One Click Blog Post Blog Title Blog Outline Blog Intro Blog Paragraph Blog Post Writer Job Post Product Description Linkedin Post Facebook Post Meta Title Meta Description Meta Keywords Sales Page Headlines Sentence Expander Button Call to Action Text Review Blog Post Comparison Blog Post Between 2 Products WooCommerce Product Description Amazon Product Review Email Subject Line Email Content FAQs Writer Grammar Correction Features to Benefits HSO Copywriting Formula AIDA Copywriting Formula PAS Copywriting Formula Offer Ideas Press Release Social Media Post Ideas Website Tagline Website About Us Quora Answers Comment Reply Feature List Course Name Course Description Feature Details Keyword Generator Content Rewriter Magic Headlines HOW WP WAND IS DIFFERENT? Your key, your bill There’s no WP Wand subscription and no word quota you have to buy back. You connect your own OpenAI, Claude, Gemini, OpenRouter or Deepseek key and pay that provider directly for what you use. No cap on single generations Templates and the AI Assistant aren’t rate-limited by WP Wand. Bulk Posts and Automation are capped on the free plugin — 5 runs each per 30 days — and Pro raises both. Bulk blog post generation Add your topics and WP Wand queues the posts in the background. Free covers 5 runs a month of up to 10 posts each. Everything inside WordPress No second tab, no separate dashboard. You write from the editor you’re already in. 44 prompt templates Every template ships free. They’re written for a specific job — meta description, product copy, FAQ block, press release — so you’re not starting from a blank prompt box. Works with your themes and plugins WP Wand puts content into the editor. It doesn’t touch how your theme renders it. WHAT YOU CAN WRITE Long-form blog posts One Click Blog Post turns a topic into a full draft of roughly 2,000 words in a couple of minutes. Edit it, add what only you know, then publish. Website content Taglines, About Us pages, feature lists and course descriptions for a new site or a rewrite of an old one. Marketing copy Landing page headlines, ad copy, calls to action, and the AIDA, PAS and HSO formulas if you want a proven structure. Social media content Post ideas, LinkedIn posts and Facebook posts, in the tone you pick. Email content Subject lines and email copy, written to a brief instead of from scratch. eCommerce content Product descriptions, Amazon-style reviews and comparison posts. The free plugin has a WooCommerce Product Description template; the panel inside the WooCommerce product editor is a Pro feature. Supported Languages Afrikaans Arabic Armenian Bosnian Bulgarian Chinese Croatian Czech Danish Dutch English Estonian Filipino Finnish French German Greek Hebrew Hindi Hungarian Indonesian Italian Japanese Korean Latvian Lithuanian Malay Norwegian Persian Polish Portuguese Romanian Russian Serbian Slovak Slovenian Spanish Swedish Thai Turkish Ukrainian Urdu Vietnamese Fine-Tune Your Content If you want more control, the Advanced tab has: Creativity (temperature): how far the model strays from the safe answer. Higher is more varied, less predictable. Max reply length: the longest reply one request may return. Topic variety: nudge the model towards new topics instead of circling the same ones. Word variety: nudge it away from repeating the same phrases. Live preview (streaming): watch the text arrive as it’s written. Install WP Wand, add a key, and write your first draft in a couple of minutes.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C