Vulnerabilities

TI-2026-70255 CVE-2026-104742 · GHSA-qjp4-v5fm-75mr

AI Puffer lets subscribers change site-wide search settings

LOW 15

The AI Puffer – Chat.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00269 Published 2026-10-10 No fix listed CWE-862

TI-2026-70254 CVE-2026-104741 · GHSA-rpm3-pvm2-pgm6

AI Puffer plugin lets subscribers change global indexing settings

LOW 15

The AI Puffer – Chat.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00269 Published 2026-10-10 No fix listed CWE-862

TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79

TI-2025-29967 CVE-2025-47470 · GHSA-95cr-2j94-r726

WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in senols GPT3 AI Content Writer gpt3-ai-content-generator allows Cross Site Request Forgery.This issue affects GPT3 AI Content Writer: from n/a through <= 1.9.14.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2025-05-07 No fix listed CWE-352

TI-2025-00347 CVE-2025-0429 · GHSA-6c43-vrq5-7v76

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms

LOW 35

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502

TI-2025-00346 CVE-2025-0428 · GHSA-4cmc-6r4j-g9p3

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts

LOW 35

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00672 Published 2025-01-22 No fix listed CWE-502

TI-2024-12402 CVE-2024-13360 · GHSA-prqh-6jh9-2qr5

AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery

LOW 24

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector().

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-22 No fix listed CWE-918

TI-2024-12403 CVE-2024-13361 · GHSA-q9w3-c433-527w

Missing authorization in senols AI Puffer – Your AI engine for WordPress

LOW 38

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00327 Published 2025-01-22 No fix listed CWE-862

TI-2024-09622 CVE-2024-10392 · GHSA-fjcx-qrhr-v7rr

AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload

HIGH 65

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.14984 Published 2024-10-31 No fix listed CWE-434

TI-2024-24969 CVE-2024-37465 · GHSA-8j5c-mmh8-684w

WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-07-21 No fix listed CWE-79

TI-2023-28180 CVE-2023-51528 · GHSA-c5gg-j242-57x6

WordPress GPT3 AI Content Writer Plugin <= 1.8.12 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00241 Published 2024-02-29 No fix listed CWE-352

TI-2023-28179 CVE-2023-51527 · GHSA-8cp4-ffj7-48q5

WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data Exposure

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2023-12-29 No fix listed CWE-200

Vulnerabilities

Filters