Vendor
senols
9 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Critical 9.8CVE-2024-10392 EPSS 15%
AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload
The AI Power: Complete AI Pack plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handle_image_upload' function in all versions up to, and including, 1.8.89. This makes it possible for unauthenticated atta…