CVE-2024-13361

The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicgsaveimagemedia function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

CVE-2024-13361

creationtimestamp| type| source ---|---|--- 2025-01-22 08:02:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2527 2025-01-22 08:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcwhdfn4z2p 2025-01-22 08:54:28+00:00| seen|...

CVE-2024-13361

CVE-2024-13361 involves the WordPress plugin “AI Power: Complete AI Pack.” The vulnerability arises from a missing capability check in wpaicg_save_image_media across versions up to 1.8.96, enabling authenticated attackers with Subscriber+ access to upload image files and embed shortcode attribute...