Senols vulnerabilities
We track 4 vulnerabilities in Senols products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2025.
Latest Senols vulnerabilities
- 7.2 High severity
AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data
The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. T
- 7.2 High severity
AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data
The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This
- 8.8 High severity
AI Puffer – Your AI engine for WordPress…: Missing Authorization
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers,
- 9.8 Critical severity
AI Puffer – Your AI engine for WordPress…: Unrestricted Upload of File with Dangerous Type
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attac