Skip to content
OpenAdvisories

Vendor

irisideatechsolutions

1 known vulnerabilities.

Products

Kalrav AI Agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-13374 Public exploit

    Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action

    The Kalrav AI Agent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the kalrav_upload_file AJAX action in all versions up to, and including, 2.3.3. This makes it possible for unauthenticated attackers to upl…

    irisideatechsolutions Kalrav AI Agent Web / CMS