CVE-2025-620392025-09-11
AI ChatBot with ChatGPT and Content Generator by AYS
Data exposure
PlatformWordPress
Affected≤ 2.6.6
Patched2.6.7
Back to dashboard Research file / active
Vulnerability research / n0_arafat_n0
A record ofvulnerabilitiesfound and reported.
My work follows the evidence: reproduce the flaw, document the impact, coordinate disclosure, and stay on the case until users have a safer release.
Verified researcher profilePatchstack VDPDisclosure dossierFIELD NOTES / 2025
verified record01
CVE-2025-62039AI ChatBot with ChatGPT and Content Generator by AYS
7.502
CVE-2025-58680Gutentor
6.503
CVE-2025-59562Academy LMS
5.5discoververifydisclosepatch
09Total findings
07Published CVEs
7.5Peak CVSS
03Attack classes
01 / DISCLOSURES
Vulnerability archive
Each ticket is a case file. Select a category, then open the advisory for the full technical record.
Filter archive
09 records shownNewest first
CVE-2025-586802025-08-17
Gutentor
Access control
PlatformWordPress
Affected≤ 3.5.2
PatchedPending
CVE-2025-595622025-08-07
Academy LMS
IDOR
PlatformWordPress
Affected≤ 3.3.4
Patched3.3.5
CVE-2025-589812025-08-16
Accessibility Checker by Equalize Digital
IDOR
PlatformWordPress
Affected≤ 1.30.0
Patched1.31.0
CVE-2025-642772025-09-12
ChatBot
Access control
PlatformWordPress
Affected≤ 7.3.9
Patched7.4.0
CVE-2025-629322025-09-06
Table Block by RioVizual
Access control
PlatformWordPress
Affected≤ 3.0.1
PatchedPending
CVE-2025-629312025-09-06
MSN Partner Hub
Access control
PlatformWordPress
Affected≤ 2.9
PatchedPending
CVE · RESERVED2025-09-06
Event Tickets
Access control
PlatformWordPress
Affected≤ 5.26.3
PatchedPending
CVE · RESERVED2025-10-10
Publitio
Data exposure
PlatformWordPress
Affected≤ 2.2.5
PatchedPending
CVEs Discovered by Easin Arafat (n0_arafat_n0)
Easin Arafat, Application Security Engineer at Startise, is a security researcher credited on the Patchstack Vulnerability Disclosure Program under the handle n0_arafat_n0. He has responsibly disclosed security vulnerabilities spanning Broken Access Control, Insecure Direct Object Reference, and Sensitive Data Exposure.
- CVE-2025-62039: AI ChatBot with ChatGPT and Content Generator by AYS ≤ 2.6.6: Sensitive Data Exposure (CVSS 7.5, High) reported by Easin Arafat via Patchstack.
- CVE-2025-58680: Gutentor ≤ 3.5.2: Broken Access Control (CVSS 6.5, Medium) reported by Easin Arafat via Patchstack.
- CVE-2025-59562: Academy LMS ≤ 3.3.4: Insecure Direct Object Reference (IDOR) (CVSS 5.5, Medium) reported by Easin Arafat via Patchstack.
- CVE-2025-58981: Accessibility Checker by Equalize Digital ≤ 1.30.0: Insecure Direct Object Reference (IDOR) (CVSS 5.4, Medium) reported by Easin Arafat via Patchstack.
- CVE-2025-64277: ChatBot ≤ 7.3.9: Broken Access Control (CVSS 5.3, Medium) reported by Easin Arafat via Patchstack.
- CVE-2025-62932: Table Block by RioVizual ≤ 3.0.1: Broken Access Control (CVSS 4.3, Medium) reported by Easin Arafat via Patchstack.
- CVE-2025-62931: MSN Partner Hub ≤ 2.9: Broken Access Control (CVSS 4.3, Medium) reported by Easin Arafat via Patchstack.
- Event Tickets ≤ 5.26.3: Broken Access Control (CVSS 5.4, Medium) reported by Easin Arafat via Patchstack.
- Publitio ≤ 2.2.5: Sensitive Data Exposure (CVSS 5, Medium) reported by Easin Arafat via Patchstack.