Senols Ai Puffer – Your Ai Engine For WordPress (Formerly Ai Power)
5 CVEs affecting Senols Ai Puffer – Your Ai Engine For WordPress (Formerly Ai Power). Latest disclosed: 2025-01-22. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10392 | Critical | 9.8 | 2024-10-31 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' fu… |
CVE-2025-0429 | High | 7.2 | 2025-01-22 | The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of unt… |
CVE-2025-0428 | High | 7.2 | 2025-01-22 | The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of unt… |
CVE-2024-13361 | Medium | 6.3 | 2025-01-22 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media funct… |
CVE-2024-13360 | Medium | 5.4 | 2025-01-22 | The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_tr… |