Aipower vulnerabilities
We track 6 vulnerabilities in Aipower products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2025.
Latest Aipower vulnerabilities
- 7.2 High severity
AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data
The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. T
- 7.2 High severity
AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data
The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This
- 8.8 High severity
AI Puffer – Your AI engine for WordPress…: Missing Authorization
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers,
- 9.8 Critical severity
AI Puffer – Your AI engine for WordPress…: Unrestricted Upload of File with Dangerous Type
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attac
- 8.8 High severity
AI Power: Complete AI Pack – Powered by GPT-4: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12.
- 7.5 High severity
AI Power: Complete AI Pack – Powered by GPT-4: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.2.