AI
Product
Aipower
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 2Low 0
Watch
Add Aipower to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10392 | 9.8 | Oct 31 | AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload Affected: through 1.8.89 |
| CVE-2024-13361 | 8.8 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution Affected: before 1.8.97 |
| CVE-2023-51528 | 8.8 | Feb 29 | Cross-Site Request Forgery (CSRF) vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from… Affected: before 1.8.13 |
| CVE-2023-51527 | 7.5 | Dec 29 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack… Affected: before 1.8.3 |
| CVE-2025-0429 | 7.2 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms Affected: before 1.8.97 |
| CVE-2025-0428 | 7.2 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts Affected: before 1.8.97 |
| CVE-2024-13360 | 5.4 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery Affected: before 1.8.97 |
| CVE-2024-37465 | 5.4 | Jul 21 | WordPress AI Power: Complete AI Pack – Powered by GPT-4 plugin <= 1.8.66 - Cross Site Scripting (XSS) vulnerability Affected: before 1.8.67 |
Showing 8
