AI Puffer – AI Chatbot, AI Writer & Automation — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in AI Puffer – AI Chatbot, AI Writer & Automation, with AI-generated Chinese analysis, references, and POCs.

Vendor: senols

CVE ID	Title	CVSS	Severity	Published
CVE-2026-104742	AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action CWE-862	3.1	Low	2026-10-10
CVE-2026-104741	AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint CWE-862	3.1	Low	2026-10-10

All 2 known CVE vulnerabilities affecting AI Puffer – AI Chatbot, AI Writer & Automation with full Chinese analysis, references, and POCs where available.