Vulnerabilidades de aipower (CVE)

Registros CVE publicados para aipower, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados
9.8Crítica
CVE-2024-10392

AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload

senols AI Puffer – Your AI engine for WordPress (formerly AI Power); aipower aipower

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated atta…

15%EPSS