Vulnerabilities

TI-2025-00347 CVE-2025-0429 · GHSA-6c43-vrq5-7v76

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms

LOW 35

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502

TI-2025-00346 CVE-2025-0428 · GHSA-4cmc-6r4j-g9p3

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts

LOW 35

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502

TI-2024-12402 CVE-2024-13360 · GHSA-prqh-6jh9-2qr5

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery

LOW 24

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector().

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-22 No fix listed CWE-918

TI-2024-12403 CVE-2024-13361 · GHSA-q9w3-c433-527w

Missing authorization in senols AI Puffer – Your AI engine for WordPress

LOW 38

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00327 Published 2025-01-22 No fix listed CWE-862

TI-2024-24969 CVE-2024-37465 · GHSA-8j5c-mmh8-684w

WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-07-21 No fix listed CWE-79

TI-2023-28180 CVE-2023-51528 · GHSA-c5gg-j242-57x6

WordPress GPT3 AI Content Writer Plugin <= 1.8.12 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-02-29 No fix listed CWE-352

TI-2023-28179 CVE-2023-51527 · GHSA-8cp4-ffj7-48q5

WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200