Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

AI Puffer – Your AI engine for WordPress (formerly AI Power) — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in AI Puffer – Your AI engine for WordPress (formerly AI Power), with AI-generated Chinese analysis, references, and POCs.

Vendor: senols

CVE IDTitleCVSSSeverityPublished
CVE-2025-0429 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms CWE-502 7.2 High2025-01-22
CVE-2025-0428 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts CWE-502 7.2 High2025-01-22
CVE-2024-13361 AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution CWE-862 6.3 Medium2025-01-22
CVE-2024-13360 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery CWE-918 5.4 Medium2025-01-22
CVE-2024-10392 AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload CWE-434 9.8 Critical2024-10-31

All 5 known CVE vulnerabilities affecting AI Puffer – Your AI engine for WordPress (formerly AI Power) with full Chinese analysis, references, and POCs where available.