All 5 CVE vulnerabilities found in AI Puffer – Your AI engine for WordPress (formerly AI Power), with AI-generated Chinese analysis, references, and POCs.
Vendor: senols
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-0429 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms CWE-502 | 7.2 | High | 2025-01-22 |
| CVE-2025-0428 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts CWE-502 | 7.2 | High | 2025-01-22 |
| CVE-2024-13361 | AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution CWE-862 | 6.3 | Medium | 2025-01-22 |
| CVE-2024-13360 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery CWE-918 | 5.4 | Medium | 2025-01-22 |
| CVE-2024-10392 | AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload CWE-434 | 9.8 | Critical | 2024-10-31 |
All 5 known CVE vulnerabilities affecting AI Puffer – Your AI engine for WordPress (formerly AI Power) with full Chinese analysis, references, and POCs where available.