Vulnerabilities

TI-2026-25086 CVE-2026-32559 · GHSA-vjvh-rjh6-h3qf

WordPress UltimateAI plugin <= 3.1.0 - Arbitrary File Upload vulnerability

MEDIUM 43

Subscriber Arbitrary File Upload in UltimateAI <= 3.1.0 versions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00479 Published 2026-08-24 No fix listed CWE-434

TI-2024-08455 CVE-2024-9105 · GHSA-hx9w-qrww-76v2

MEDIUM 50

The UltimateAI plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.8.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-10-16 No fix listed CWE-288

TI-2024-08454 CVE-2024-9104 · GHSA-8c22-3v87-c9p2

LOW 25

The UltimateAI plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.8.3.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00336 Published 2024-10-16 No fix listed CWE-703