AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot
AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot has a vendor fix available, so running the current release closes it.
All of these findings were reported by Michael Perla (vizen5). AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-109999AI Marketing Expert <= 1.2.8 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'name' Parameter
Read the full analysisVulnerability Records

AI Marketing Expert — AI Email Marketing, AI Content Generator, SEO Analyzer, AI Workflow Automation, Social Media & Ai Chatbot
Author
Noor Alam
AI Marketing Expert is the most complete AI-powered marketing suite for WordPress. Instead of paying for Apollo/Hunter, Mailchimp, Jasper, Semrush, Hootsuite, Intercom, CartBounty, and Zapier separately, you get all in one place — B2B lead finder, email marketing, content generation, SEO, social media, a live AI chatbot, workflow automation, and WooCommerce abandoned cart recovery — built right into your WordPress admin. Powered by your choice of leading AI models (ChatGPT, Claude, Gemini, or OpenRouter), every module is designed to save you hours every week and help you grow your audience consistently without burnout. The built-in SEO Analyzer module gives you AI-powered keyword research, on-page audits, rank tracking, and topical authority mapping — all without leaving WordPress. 🔗 View Plugin Website | 🚀 Upgrade to Pro | 🚀 View documentation Whether you are a blogger, an e-commerce store owner, a small business, or a freelancer managing client sites, AI Marketing Expert gives you enterprise-grade marketing automation at zero extra tool cost. 🎬 Watch The Setup Video ✅ Why AI Marketing Expert? All-in-one — Six complete marketing tools in a single WordPress plugin AI-native — Every module uses AI to write, optimize, and automate your marketing Your AI, your keys — Connect OpenAI, Anthropic Claude, Google Gemini, or OpenRouter Modular — Activate only the modules you need Privacy-first — API keys encrypted at rest (AES-256), no third-party data sharing Generous free tier — Real value without a subscription 👉 Upgrade to Pro to unlock unlimited everything. 📧 Email Marketing (Free + Pro) A complete email CRM, cold outreach, and campaign system built inside WordPress — no Mailchimp or external lead generation subscriptions needed. 🎯 B2B Lead Finder & Autopilot Pipeline (NEW in 1.2.5) Instant Prospect Search — Find verified B2B leads by job title/role (CEO, Founder, CMO, Sales Lead), industry, location, and company size. 1-Click Lead Collection — Collect discovered prospects directly into your verified subscriber lists with a single click. Autopilot Pipeline — Set your ideal customer criteria once and let the automated engine find, verify, and import fresh high-converting leads on autopilot. Built-in Email Validation — Automatic syntax and domain MX deliverability verification before adding to lists to safeguard sender reputation. Cold Outreach Ready — Pipe collected leads immediately into cold outreach campaigns and multi-step automated email nurture funnels. Subscriber Management Unlimited subscribers (Free) Add, edit, bulk manage, and delete subscribers Custom fields, tags, and list segmentation Import from CSV, WordPress users, or WooCommerce customers Full subscriber profile with activity history and notes Public subscribe form via REST API Campaigns Create and schedule email campaigns (30/month Free, Unlimited Pro) Choose recipients by list, tag, or audience segment Track open rates, click rates, unsubscribes, and per-link click metrics Live campaign progress monitoring Email Automation & Drip Funnels Multi-step drip/funnel sequences with triggers (2 funnels Free, Unlimited Pro) Enroll and unenroll subscribers per funnel Funnel performance metrics dashboard Templates & AI Writing Reusable HTML email templates with merge tag placeholders Template preview renderer Default templates ready to use on activation AI-generated subject lines, preview text, and copy suggestions SMTP & Sending Multi-connection SMTP with automatic fallback (Gmail, Outlook, Amazon SES, SendGrid, Mailgun, SparkPost, custom SMTP) Test connection before saving List-Unsubscribe headers + one-click unsubscribe footer for compliance Email Deliverability & Bounce Management (NEW in 1.2.8) Zero-Config IMAP Bounce Detection — Pure PHP IMAP4 SSL socket engine that automatically connects to your mailbox using existing SMTP credentials with zero manual IMAP setup. Independent of the deprecated ext-imap extension (PHP 8.1–8.4+ ready). Cloud ESP Suppression Sync (Pro) — Autonomous background synchronization for Brevo, SendGrid, and Mailgun to automatically pull hard bounce events and spam complaints via REST APIs. Pre-flight DNS MX Deliverability Guard — Pre-checks recipient domain DNS MX records before dispatch to prevent bounces from invalid domains. Custom Tracking Domain (Branded CNAME) — Use your own branded domain (e.g., https://track.yourdomain.com) for open and click tracking. Deliverability Health Dashboard — Real-time monitoring of clean vs quarantined bounce ratios with on-demand bounce scanning. Free vs Pro Free: Unlimited subscribers, 30 campaigns/month, 2 automation funnels, basic segmentation (lists & tags) Pro: Unlimited campaigns, unlimited funnels, advanced segmentation (custom fields, behavior), A/B testing 📝 AI Content Generator (Free + Pro) Write complete, SEO-optimized blog posts with one click using the AI content generator. Generate full articles: title, introduction, structured body sections, and CTA Deep Humanize (Enhanced in 1.2.6) — Rewrite and polish text with strict structural preservation of Table of Contents, Quick Answer boxes, FAQs, intro paragraphs, and media elements Contextual Internal Linking (NEW in 1.2.6) — Automatically scans existing articles and contextually injects natural internal links on publish SEO Multi-Plugin Sync (NEW in 1.2.6) — Synchronizes Focus Keyword, Meta Title, and Meta Description directly into Yoast SEO, Rank Math, and All-in-One SEO (AIOSEO) Per-section SEO analysis: keyword density and readability scoring Configure word count, tone, target keyword, categories, and tags Publish directly or save as WordPress draft Scheduled publishing via WP-Cron Save generation presets with custom brand voice settings Article generation history and per-article stats Free vs Pro Free: 20 articles/month, up to 2,000 words Pro: Unlimited articles, up to 5,000 words, custom presets, AI image prompt generation, multi-language content 🔍 SEO Analyzer (Free + Pro) AI-powered SEO intelligence and on-page optimization without leaving WordPress. The SEO Analyzer module covers everything from keyword discovery to rank tracking — no separate SEO tool needed. Keyword Research — Discover keyword opportunities with AI analysis Keyword Vault — Save and manage keywords persistently (50 Free, Unlimited Pro) On-Page SEO Audits — Audit any post or page; auto-audit triggers on post save Site-Wide Batch Audits — Audit all posts at once (Pro) Topical Authority Mapping — Build pillar + cluster content maps with visual coverage (Pro) Content Calendar — Plan content around keyword targets (Pro) Rank Tracking — Daily keyword rank checks with historical trend charts (Pro) Link Building Pipeline — AI-powered outreach suggestions and prospect management (Pro) Entity SEO & Schema — Structured data suggestions and competitor gap analysis (Pro) Export — CSV and PDF export of all reports (Pro) Free vs Pro Free: 10 keyword searches/month, 50 keyword vault, 5 audits/month Pro: Unlimited keywords, unlimited vault, unlimited audits, rank tracking, topical authority, competitor analysis 📱 Social Media Scheduler (Free + Pro) Schedule and publish AI-generated social posts to Facebook, Instagram, LinkedIn, and X/Twitter directly from WordPress. Connect accounts via OAuth (Facebook, Instagram, LinkedIn, X/Twitter) Auto-share on publish — automatically generate and schedule AI social posts when a blog post or WooCommerce product is published Compose and publish to one or multiple accounts simultaneously AI caption generation optimized per platform AI hashtag suggestions 5-minute WP-Cron processing for reliable scheduled delivery Visual drag-and-drop scheduling calendar (Pro) Repurpose blog articles as social posts with one click (Pro) Bulk upload and schedule multiple posts at once (Pro) Engagement analytics: likes, comments, shares, reach, impressions Free vs Pro Free: 2 connected accounts, 30 posts/month, 3 scheduled posts Pro: Unlimited accounts, unlimited posts, unlimited scheduled posts, visual calendar, AI repurposing, bulk scheduling 💬 AI Chatbot (Free + Pro) Add an intelligent AI chatbot to your WordPress site for 24/7 customer support, lead capture, and visitor engagement. Create and configure chatbot instances with a custom system prompt and personality Customizable widget colors, position, and branding Full conversation history in WordPress admin Knowledge Base — Index documents, URLs, and WooCommerce products so the AI gives accurate site-specific answers (Pro) Lead Capture — Configurable forms inside the chat widget; leads are automatically saved as subscribers in the Email module Human Takeover — Escalate live conversations to a human agent (Pro) Business Hours — Set availability windows and configure offline messages (Pro) Custom CSS Theming — Full visual customization (Pro) [aime_discussions] shortcode for a public discussions page Visitor satisfaction rating and conversation analytics Free vs Pro Free: 1 chatbot, 100 conversations/month Pro: Unlimited chatbots, unlimited conversations, knowledge base (docs, URLs, WooCommerce), human takeover, business hours, custom CSS 🛒 WooCommerce Cart Abandonment & Recovery (Free + Pro) Recover lost store revenue automatically without paying for separate expensive SaaS tools like CartBounty, Klaviyo, or Abandoned Cart Pro. Real-Time Session Tracking — Tracks both logged-in customers and guest visitors across browsing sessions using secure tokens (aime_cart_token). Guest Checkout AJAX Capture — Automatically captures guest email, name, and phone in the background the moment they type into checkout fields—before an order is placed. Automated Inactivity Detection — Scheduled 15-minute WP-Cron evaluates inactive sessions (configurable, default 30 mins) and marks them as abandoned. 1-Click Cart Restoration Deep Links — Generates encrypted restoration links ({event.recovery_url}) that reload items, variations, and quantities in 1-click and direct shoppers straight to checkout. 1-Click Single-Quantity Checkout — Automatically detects accidental duplicate quantities (cart_type: duplicate_qty) and provides a 1-click deep link ({event.single_qty_url}) to complete checkout with just 1 item without manual cart editing. 1-Click Single-Item Checkout Links — For carts with multiple products (cart_type: multiple_items), generates individual 1-click direct checkout links ({event.single_item_links}) so shoppers can easily purchase just the item they want most. Smart Cart Type Branching — Branch workflows based on cart contents (single_item, duplicate_qty, multiple_items) with pre-built smart templates and AI text-to-workflow recipes. Order Recovery Detection — Automatically detects when a customer completes their order, marking carts as recovered and attributing recovered revenue. Universal Workflow Integration — Seamlessly triggers automated recovery email sequences, discount offers, and store manager alerts via Workflow Automation. Free vs Pro Free: Real-time cart tracking, guest capture, 1-click recovery URLs, 1 active recovery workflow sequence Pro: Unlimited recovery workflows, multi-step timed recovery funnels, dynamic coupons, advanced attribution analytics ⚙️ Workflow Automation (Free + Pro) Chain actions from every module into scheduled, automated marketing workflows — like a built-in Zapier for your WordPress marketing stack. Visual Workflow Builder — Canvas-based visual step editor with drag-and-drop branching and real-time execution graphs Text-to-Workflow AI Generator (NEW in 1.2.6) — Describe your automation in plain natural language (English or Bengali) or pick from 8 high-converting recipes, and AI builds the entire canvas graph automatically Wait / Delay Step (NEW in 1.2.6) — Pause workflow execution between steps for seconds, minutes, hours, or days (e.g. Abandoned Cart -> Wait 1 Hour -> Send Email 1 -> Wait 24 Hours -> Send Email 2) Direct Email Sending — Dispatch instant emails using your configured multi-connection SMTP pool with dynamic token substitution E-Commerce Triggers — WooCommerce Cart Abandoned and WooCommerce Order Completed with minimum value filters and recovery URLs Lead & Event Triggers — Inbound Webhook, Contact Form 7 Submission, User Registered, Comment Posted, New Subscriber, and Post Published Schedule Triggers — Once, hourly, daily, weekly, monthly, or custom intervals Conditional Logic — Branch workflows with Yes/No paths based on upstream step results, text matches, or numeric score comparisons (Pro) Pre-Built Blueprint Templates — Instant starter blueprints including Cart Recovery, Post-Purchase Review Requests, CF7 Auto-Responders, and Content Repurposing engines Free vs Pro Free: 2 active workflows, 3 steps per workflow, 30 runs/month, core triggers, starter templates Pro: Unlimited workflows, unlimited steps, unlimited runs, all webhook & event triggers, conditional logic, full template library 🤖 Supported AI Providers All modules share one AI provider system. Add as many connections as you need and assign them per module. OpenAI (ChatGPT) — GPT-4o, GPT-4o mini, o3-mini, GPT Image and more Anthropic Claude — Claude 4 Sonnet, Claude 3.5 Haiku, Claude 3 Opus and more Google AI Studio (Gemini) — Gemini 2.5 Pro, Gemini 2.5 Flash, Gemma 3 and more OpenRouter — Access 200+ models through one API key (Llama, Mistral, DeepSeek, and more) Custom Provider — Any OpenAI-compatible or Anthropic-compatible API endpoint API keys are encrypted at rest using AES-256-GCM authenticated encryption with WordPress salt-derived keys. Keys can also be loaded from PHP constants or environment variables for production security. 🔒 Security & Privacy All API keys and SMTP credentials are encrypted at rest (AES-256-GCM) SSRF protection on all remote URL fetches HMAC-signed email tracking links No subscriber or visitor data is ever sent to third parties Full compliance with WordPress coding standards and Plugin Check 📊 Unified Dashboard The main AI Marketing dashboard shows: Summary stats from all active modules Per-module activity trend charts (7–90 day range) Quick links to create campaigns, generate content, and manage subscribers 🔌 Integrations Anthropic Claude, OpenAI GPT, Google Gemini, OpenRouter SMTP providers: Gmail, Outlook, Amazon SES, SendGrid, Mailgun, SparkPost, Custom Facebook Pages, Instagram Business, X/Twitter WordPress Posts, WooCommerce Products WP-Cron for scheduled task execution Privacy Policy AI Marketing Expert connects to third-party services to deliver AI generation, social posting, and email deliverability. Data is transmitted only when you actively configure and use these features. AI Providers (OpenAI, Anthropic Claude, Google Gemini, OpenRouter): Only your submitted prompt text is transmitted to generate content, SEO suggestions, or chat replies. No subscriber records or personal data are ever sent. OpenAI Privacy | Anthropic Privacy | Google Privacy | OpenRouter Privacy Social Networks (Meta Facebook/Instagram, LinkedIn, X/Twitter): Transmits post copy, media, and OAuth tokens when scheduling or publishing posts. Meta Privacy | LinkedIn Privacy | X Privacy Stock Images (Pexels, Pixabay): Queries keywords to fetch media previews when searching photos. Pexels Terms | Pixabay Terms Email & ESPs: Sends outbound emails via your own SMTP server. Suppression sync queries bounce lists from your ESP account (Brevo, SendGrid, Mailgun) to safeguard sender reputation. All API credentials and SMTP passwords are encrypted at rest (AES-256-GCM) in your WordPress database. All subscriber lists, analytics, and customer data remain strictly on your own server.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C