Semrush Content Toolkit

Semrush Content Toolkit has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Semrush Content Toolkit has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nabil Irawan. Semrush Content Toolkit is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Semrush Content Toolkit vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-68082

Semrush Content Toolkit <= 1.1.32 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
Semrush Content Toolkit banner
Latestv1.1.34

Semrush Content Toolkit

SEMrush CY LTD

Author

SEMrush CY LTD

2.6(5)
52/100
Last Updated
2026-06-25 (3mo ago)
Active Installs
2,000+
Downloads
24,816
Requires WP
5.0+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2023-04-27 (3y ago)

The Semrush Content Toolkit is a smart AI writing tool that finds data-driven content for your website, creates SEO-ready briefs, and generates long-form content using real-time data. Use it to write articles for your blog, optimize your existing drafts, and guide the entire content creation process. It integrates with WordPress, allowing you to post articles created with the tool directly to your blog. Key Features Find keyword and topic ideas for your website Create SEO content briefs Generate SEO-friendly long-form content Edit and optimize your drafts Generate AI images Post directly to WordPress How does it work? Using the Semrush Content Toolkit plugin, you can publish articles created with the tool straight to your WordPress website. To install the plugin, check this quick guide or follow the steps below: Click “Download” at the top of this page. The plugin will automatically save as a .zip file. You can also head to WordPress and search for the Semrush Content Toolkit in the “Plugins” tab. Log in to the admin area of your WordPress account Find “Plugins” in the main menu, and click on “Add New” Find and click “Upload Plugin” at the top of the page and select the .zip file. Once the plugin has been installed, go to “Settings”, find “Semrush Content Toolkit” and click the “Connect” button. Finally, log in to the Content Toolkit and allow the WordPress connection. To use WordPress integration once you have your article ready, click the “Share” button and choose the WordPress option. With just one click, you can publish your article directly to the WordPress site. Limits To use the Content Toolkit, you need to have a Semrush account and have a paid (or trial) account for the tool. See also Semrush Privacy Policy Semrush Terms of Service

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C