Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Security & Risk Analysis

wordpress.org/plugins/newsletter-page-redirects

Generate SEO-optimized content with AI. Multi-provider support (OpenAI, Anthropic, Google), templates, image generation & WooCommerce integration.

10 active installs v2.2.2 PHP 7.0+ WP 5.0+ Updated Feb 10, 2026
ai-contentarticle-writerchatgptcontent-generatorseo
97
A · Safe
CVEs total1
Unpatched0
Last CVEDec 18, 2024
Safety Verdict

Is Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Safe to Use in 2026?

Generally Safe

Score 97/100

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Dec 18, 2024Updated 1mo ago
Risk Assessment

The "newsletter-page-redirects" plugin v2.2.2 exhibits a mixed security posture. While it demonstrates good practices such as a high percentage of prepared SQL statements and a significant number of nonce and capability checks, several areas present potential risks. The presence of 5 AJAX handlers without authentication checks is a significant concern, creating a considerable attack surface that could be exploited by unauthenticated users. Additionally, the taint analysis revealed 3 flows with unsanitized paths, indicating a risk of path traversal vulnerabilities, although thankfully none were classified as critical or high severity.

Key Concerns

  • AJAX handlers without auth checks
  • Flows with unsanitized paths
  • Bundled Freemius v1.0 library
Vulnerabilities
1

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Critical
1

1 total CVE

CVE-2024-56205critical · 9.8Incorrect Privilege Assignment

AI Magic <= 1.0.4 - Unauthenticated Privilege Escalation

Dec 18, 2024 Patched in 1.0.6 (352d)
Code Analysis
Analyzed Mar 17, 2026

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Code Analysis

Dangerous Functions
0
Raw SQL Queries
10
50 prepared
Unescaped Output
566
949 escaped
Nonce Checks
36
Capability Checks
44
File Operations
2
External Requests
22
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

83% prepared60 total queries

Output Escaping

63% escaped1515 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

14 flows3 with unsanitized paths
ajax_search_history (admin\class-ai-magic-admin.php:123)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
5 unprotected

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Attack Surface

Entry Points34
Unprotected5

AJAX Handlers 34

authwp_ajax_ai_magic_chat_messageadmin\class-ai-magic-admin-bar.php:23
authwp_ajax_ai_magic_generate_metaadmin\class-ai-magic-admin-bar.php:24
authwp_ajax_ai_magic_extract_keywordsadmin\class-ai-magic-admin-bar.php:25
authwp_ajax_ai_magic_generate_full_articleadmin\class-ai-magic-article-generator.php:24
authwp_ajax_ai_magic_preview_full_article_promptadmin\class-ai-magic-article-generator.php:25
authwp_ajax_ai_magic_generate_titlesadmin\class-ai-magic-article-generator.php:26
authwp_ajax_ai_magic_generate_outlineadmin\class-ai-magic-article-generator.php:27
authwp_ajax_ai_magic_create_tagsadmin\class-ai-magic-article-generator.php:28
authwp_ajax_ai_magic_update_seo_metaadmin\class-ai-magic-article-generator.php:29
authwp_ajax_save_plugin_settingsadmin\class-ai-magic-menu.php:49
authwp_ajax_ai_magic_test_api_keyadmin\class-ai-magic-menu.php:52
authwp_ajax_save_generate_textadmin\class-ai-magic-menu.php:246
authwp_ajax_generate_ai_magic_contentadmin\class-ai-magic-metabox.php:28
authwp_ajax_generate_meta_descriptionadmin\class-ai-magic-metabox.php:29
authwp_ajax_generate_keywordsadmin\class-ai-magic-metabox.php:30
authwp_ajax_save_meta_descriptionadmin\class-ai-magic-metabox.php:31
authwp_ajax_ai_magic_generate_imageadmin\class-ai-magic-metabox.php:32
authwp_ajax_ai_magic_preview_promptadmin\class-ai-magic-metabox.php:33
authwp_ajax_ai_magic_save_settingsadmin\class-ai-magic-settings.php:17
authwp_ajax_ai_magic_test_apiadmin\class-ai-magic-settings.php:18
authwp_ajax_ai_magic_get_modelsadmin\class-ai-magic-settings.php:19
authwp_ajax_ai_magic_wizard_get_pagesadmin\class-ai-magic-theme-wizard.php:25
authwp_ajax_ai_magic_wizard_process_pageadmin\class-ai-magic-theme-wizard.php:26
authwp_ajax_ai_magic_wizard_stopadmin\class-ai-magic-theme-wizard.php:27
authwp_ajax_ai_magic_wizard_check_stopadmin\class-ai-magic-theme-wizard.php:28
authwp_ajax_ai_magic_wizard_clear_stopadmin\class-ai-magic-theme-wizard.php:29
authwp_ajax_ai_magic_wizard_save_stateadmin\class-ai-magic-theme-wizard.php:30
authwp_ajax_ai_magic_generate_product_descriptionadmin\class-ai-magic-woocommerce.php:45
authwp_ajax_ai_magic_generate_short_descriptionadmin\class-ai-magic-woocommerce.php:46
authwp_ajax_ai_magic_generate_product_metaadmin\class-ai-magic-woocommerce.php:47
authwp_ajax_ai_magic_bulk_generate_descriptionsadmin\class-ai-magic-woocommerce.php:48
authwp_ajax_ai_magic_search_historyincludes\class-ai-magic.php:203
authwp_ajax_ai_magic_delete_historyincludes\class-ai-magic.php:204
authwp_ajax_ai_magic_get_history_detailsincludes\class-ai-magic.php:205
WordPress Hooks 49
actionadmin_bar_menuadmin\class-ai-magic-admin-bar.php:16
actionadmin_footeradmin\class-ai-magic-admin-bar.php:17
actionwp_footeradmin\class-ai-magic-admin-bar.php:18
actionadmin_enqueue_scriptsadmin\class-ai-magic-admin-bar.php:19
actionwp_enqueue_scriptsadmin\class-ai-magic-admin-bar.php:20
actionadmin_post_ai_magic_layout_updateadmin\class-ai-magic-layout-admin.php:18
actionadd_meta_boxesadmin\class-ai-magic-metabox.php:23
actionadmin_initadmin\class-ai-magic-metabox.php:24
actionsave_postadmin\class-ai-magic-metabox.php:25
actionadmin_enqueue_scriptsadmin\class-ai-magic-metabox.php:68
actionadmin_menuadmin\class-ai-magic-settings.php:16
actionadmin_enqueue_scriptsadmin\class-ai-magic-settings.php:20
actionadmin_menuadmin\class-ai-magic-theme-wizard.php:21
actionadmin_enqueue_scriptsadmin\class-ai-magic-theme-wizard.php:22
actionadd_meta_boxesadmin\class-ai-magic-woocommerce.php:44
actionadmin_enqueue_scriptsadmin\class-ai-magic-woocommerce.php:49
actionplugins_loadedadmin\class-ai-magic-woocommerce.php:867
actioninitincludes\class-ai-magic-logs.php:2
filtermanage_ai_magic_logs_posts_columnsincludes\class-ai-magic-logs.php:45
actionplugins_loadedincludes\class-ai-magic.php:183
actionadmin_enqueue_scriptsincludes\class-ai-magic.php:199
actionadmin_enqueue_scriptsincludes\class-ai-magic.php:200
actionwp_enqueue_scriptsincludes\class-ai-magic.php:221
actionwp_enqueue_scriptsincludes\class-ai-magic.php:222
actionadmin_footerwordpress-sdk-master\includes\class-fs-logger.php:108
actionwp_footerwordpress-sdk-master\includes\class-fs-logger.php:110
filterplugins_apiwordpress-sdk-master\includes\class-fs-plugin-updater.php:83
actionadmin_headwordpress-sdk-master\includes\class-fs-plugin-updater.php:106
filterhttp_request_host_is_externalwordpress-sdk-master\includes\class-fs-plugin-updater.php:110
filterupgrader_post_installwordpress-sdk-master\includes\class-fs-plugin-updater.php:118
filterupgrader_pre_installwordpress-sdk-master\includes\class-fs-plugin-updater.php:121
filterupgrader_source_selectionwordpress-sdk-master\includes\class-fs-plugin-updater.php:122
filterwp_prepare_themes_for_jswordpress-sdk-master\includes\class-fs-plugin-updater.php:125
actionadmin_footerwordpress-sdk-master\includes\class-fs-plugin-updater.php:142
filterpre_set_site_transient_update_pluginswordpress-sdk-master\includes\class-fs-plugin-updater.php:257
filterpre_set_site_transient_update_themeswordpress-sdk-master\includes\class-fs-plugin-updater.php:262
filterupgrader_source_selectionwordpress-sdk-master\includes\class-fs-plugin-updater.php:1375
filterdebug_bar_panelswordpress-sdk-master\includes\debug\debug-bar-start.php:51
filterdebug_bar_statuseswordpress-sdk-master\includes\debug\debug-bar-start.php:52
actioninstall_plugins_pre_plugin-informationwordpress-sdk-master\includes\fs-plugin-info-dialog.php:66
filterfs_plugins_apiwordpress-sdk-master\includes\fs-plugin-info-dialog.php:69
actionadmin_footerwordpress-sdk-master\includes\managers\class-fs-admin-notice-manager.php:211
actionnetwork_admin_noticeswordpress-sdk-master\includes\managers\class-fs-admin-notice-manager.php:390
actionadmin_noticeswordpress-sdk-master\includes\managers\class-fs-admin-notice-manager.php:391
actionadmin_enqueue_scriptswordpress-sdk-master\includes\managers\class-fs-admin-notice-manager.php:394
actionadmin_post_fs_clone_resolutionwordpress-sdk-master\includes\managers\class-fs-clone-manager.php:145
actionadmin_footerwordpress-sdk-master\includes\managers\class-fs-clone-manager.php:163
actionhttp_api_curlwordpress-sdk-master\includes\sdk\FreemiusWordPress.php:482
actionadmin_footerwordpress-sdk-master\templates\account.php:93
Maintenance & Trust

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 10, 2026
PHP min version7.0
Downloads2K

Community Trust

Rating100/100
Number of ratings6
Active installs10
Developer Profile

Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini Developer Profile

SunnyKai

1 plugin · 10 total installs

77
trust score
Avg Security Score
97/100
Avg Patch Time
352 days
View full developer profile
Detection Fingerprints

How We Detect Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ai-magic/admin/css/ai-magic-admin.css/wp-content/plugins/ai-magic/admin/css/ai-magic-admin-bar.css/wp-content/plugins/ai-magic/admin/css/ai-magic-settings.css/wp-content/plugins/ai-magic/admin/js/ai-magic-admin.js/wp-content/plugins/ai-magic/admin/js/ai-magic-admin-bar.js/wp-content/plugins/ai-magic/admin/js/ai-magic-settings.js/wp-content/plugins/ai-magic/public/css/ai-magic-public.css/wp-content/plugins/ai-magic/public/js/ai-magic-public.js+1 more
Script Paths
/wp-content/plugins/ai-magic/admin/js/ai-magic-admin-bar.js/wp-content/plugins/ai-magic/admin/js/ai-magic-admin.js/wp-content/plugins/ai-magic/vendor/tinymce/tinymce/tinymce.min.js
Version Parameters
ai-magic-admin.css?ver=ai-magic-admin-bar.css?ver=ai-magic-settings.css?ver=ai-magic-admin.js?ver=ai-magic-admin-bar.js?ver=ai-magic-settings.js?ver=ai-magic-public.css?ver=ai-magic-public.js?ver=

HTML / DOM Fingerprints

CSS Classes
ai-magic-slide-panelai-magic-admin-bar-itemai-magic-admin-bar-icon
HTML Comments
<!-- AI Magic Slide Panel --><!-- AI Magic Chat --><!-- AI Magic Templates --><!-- AI Magic History -->
Data Attributes
data-ai-magic-action
JS Globals
AI_Magic_AdminAI_Magic_Admin_BarAI_Magic_SettingsAI_Magic_Editor_DetectorAI_Magic_Layout_AIAI_Magic_Content_Service+19 more
REST Endpoints
/wp-json/ai-magic/v1/chat/wp-json/ai-magic/v1/generate-meta/wp-json/ai-magic/v1/extract-keywords/wp-json/ai-magic/v1/templates/wp-json/ai-magic/v1/history
FAQ

Frequently Asked Questions about Insya Magic — AI Content Generator for ChatGPT, Claude and Gemini