StoryChief

StoryChief has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 7.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for StoryChief has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, most of them (2) reported by WPScanTeam. StoryChief is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.3/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all StoryChief vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-7441

StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records
StoryChief banner
Latestv1.0.48
4.7(14)
94/100
Last Updated
2026-09-03 (10d ago)
Active Installs
1,000+
Downloads
61,513
Requires WP
6.2+
Requires PHP
7.2+
Tested up to
WP 7.1
Created
2017-01-27 (10y ago)

StoryChief is a smart AI content operations platform that helps organizations turn scattered knowledge, disconnected tools, and fragmented workflows into coordinated content execution. Connect your website, CRM, DAM, analytics, notes, communication tools, and other systems so StoryChief can transform business context into actionable strategies, structured workflows, high-quality content, and multi-channel execution. From strategy and planning to collaboration, approvals, publishing, amplification, and performance tracking, StoryChief gives teams one connected flow to manage every stage of the content lifecycle. Unlike generic AI tools, StoryChief combines AI assistance with human control, approval workflows, brand governance, and workspace-based collaboration. Every output stays editable, reviewable, and aligned with your organization’s standards. Teams use StoryChief to coordinate campaigns, internal communications, thought leadership, editorial workflows, advocacy programs, multi-brand publishing, and cross-channel content operations — all from one centralized platform. Actions and filters Developers: This plugin has numerous actions and filters available that can be used to modify the default behaviour of the plugin. Actions: * storychief_after_publish_action($payload) * storychief_after_delete_action($payload) * storychief_save_author_action($payload) * storychief_save_tags_action($payload) * storychief_save_categories_action($payload) * storychief_save_featured_image_action($payload) * storychief_save_seo_action($payload) * storychief_sideload_images_action($payload) * storychief_image_sideload_error($error, $source_url, $post_id) Filters: * storychief_before_handle_filter($payload) * storychief_is_draft_status($is_draft, $payload) * storychief_change_post_type($post_type, $payload) * storychief_alter_response($response) * storychief_publish_permalink($permalink, $postID) Requirements This plugin requires a StoryChief account. Not a StoryChief user yet? Sign up for free! PHP version 7.0 or higher WordPress version 6.2 or higher (uses the HTML Tag Processor for responsive image sideloading)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C