senols
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| AI Puffer – Your AI engine for WordPress (formerly AI Power) | 5 | – | Jan 22, 2025 |
| AI Puffer – AI Chatbot, AI Writer & Automation | 2 | – | Oct 10, 2026 |
| AI Puffer – Chat. Create. Automate. (formerly AI Power) | 1 | – | May 1, 2026 |
| GPT3 AI Content Writer | 1 | – | May 7, 2025 |
Exploited and recent CVEs
- CVE-2026-104742 AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action 0.3%
- CVE-2026-104741 AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint 0.3%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2025-47470 WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability 0.2%
- CVE-2025-0429 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms 0.7%
- CVE-2025-0428 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts 0.7%
- CVE-2024-13360 AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery 0.2%
- CVE-2024-13361 AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.3%
- CVE-2024-10392 AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload 15.0%