Read the docs

senols

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

senols records in CISA KEV

No senols vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Aipower 7 records LOW

Records

12 records

TI-2024-09622 CVE-2024-10392 · GHSA-fjcx-qrhr-v7rr

AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload

Priority HIGH 65

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14984 Published 2024-10-31 No fix listed CWE-434
TI-2023-28179 CVE-2023-51527 · GHSA-8cp4-ffj7-48q5

WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure

Priority LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200
TI-2024-12403 CVE-2024-13361 · GHSA-q9w3-c433-527w

Missing authorization in senols AI Puffer – Your AI engine for WordPress

Priority LOW 38

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00327 Published 2025-01-22 No fix listed CWE-862
TI-2025-00347 CVE-2025-0429 · GHSA-6c43-vrq5-7v76

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms

Priority LOW 35

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502
TI-2025-00346 CVE-2025-0428 · GHSA-4cmc-6r4j-g9p3

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts

Priority LOW 35

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502
TI-2024-24969 CVE-2024-37465 · GHSA-8j5c-mmh8-684w

WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-07-21 No fix listed CWE-79
TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Priority LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79
TI-2025-29967 CVE-2025-47470 · GHSA-95cr-2j94-r726

WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content Writer: from n/a through <= 1.9.14.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352
Open these records in search →