Aipower

Aipower

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2025-0428

  • EPSS 0.79%
  • Published 22.01.2025 08:15:09
  • Last modified 24.01.2025 20:56:49

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts func...

7.2

CVE-2025-0429

  • EPSS 0.79%
  • Published 22.01.2025 08:15:09
  • Last modified 24.01.2025 20:51:18

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() f...

5.4

CVE-2024-13360

  • EPSS 0.05%
  • Published 22.01.2025 08:15:08
  • Last modified 24.01.2025 18:58:46

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it possible for authenticated attackers, with subscribe...

8.8

CVE-2024-13361

  • EPSS 0.18%
  • Published 22.01.2025 08:15:08
  • Last modified 24.01.2025 18:55:22

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated ...

9.8

CVE-2024-10392

  • EPSS 12.75%
  • Published 31.10.2024 06:15:04
  • Last modified 01.11.2024 12:57:03

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthentic...

5.4

CVE-2024-37465

  • EPSS 0.1%
  • Published 21.07.2024 22:15:03
  • Last modified 21.11.2024 09:23:53

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a through 1.8.66.

8.8

CVE-2023-51528

  • EPSS 0.17%
  • Published 29.02.2024 05:15:08
  • Last modified 26.02.2025 15:14:42

Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12.

7.5

CVE-2023-51527

  • EPSS 0.59%
  • Published 29.12.2023 15:15:10
  • Last modified 21.11.2024 08:38:18

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2.