AI Puffer – Your AI engine for WordPress (formerly AI Power) vulnerabilities

4 known vulnerabilities in AI Puffer – Your AI engine for WordPress (formerly AI Power) from Senols. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data

  CVE-2025-0429Jan 22, 2025Senols

  The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. T

• 7.2 High severity

  AI Puffer – Your AI engine for WordPress…: Deserialization of Untrusted Data

  CVE-2025-0428Jan 22, 2025Senols

  The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This

• 8.8 High severity

  AI Puffer – Your AI engine for WordPress…: Missing Authorization

  CVE-2024-13361Jan 22, 2025Senols

  The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers,

• 9.8 Critical severity

  AI Puffer – Your AI engine for WordPress…: Unrestricted Upload of File with Dangerous Type

  CVE-2024-10392Oct 31, 2024SenolsEPSS 15%

  The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated attac