SE
Vendor
senols
9
CVEs
0
On KEV
2
New 30D
Products
AP3.1
AI Puffer – AI Chatbot, AI Writer & Automation
senols
2 CVEs0 on KEV2 new
AP9.8
AI Puffer – Your AI engine for WordPress (formerly AI Power)
senols
5 CVEs0 on KEV0 new
AP6.1
AI Puffer – Chat. Create. Automate. (formerly AI Power)
senols
1 CVEs0 on KEV0 new
GA4.3
GPT3 AI Content Writer
senols
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104742 | AP AI Puffer – AI Chatbot, AI Writer & Automation senols | 3.1 | Oct 10 | AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Semantic Search Settings Modification via ajax_save_semantic_search_settings AJAX action |
| CVE-2026-104741 | AP AI Puffer – AI Chatbot, AI Writer & Automation senols | 3.1 | Oct 10 | AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint |
| CVE-2024-13362 | AP AI Puffer – Chat. Create. Automate. (formerly AI Power) senols | 6.1 | May 1 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter |
| CVE-2025-47470 | GA GPT3 AI Content Writer senols | 4.3 | May 7 | WordPress GPT3 AI Content Writer plugin <= 1.9.14 - Cross Site Request Forgery (CSRF) to Prompt Generation vulnerability |
| CVE-2025-0429 | AP AI Puffer – Your AI engine for WordPress (formerly AI Power) senols | 7.2 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms |
| CVE-2025-0428 | AP AI Puffer – Your AI engine for WordPress (formerly AI Power) senols | 7.2 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts |
| CVE-2024-13360 | AP AI Puffer – Your AI engine for WordPress (formerly AI Power) senols | 5.4 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request Forgery |
| CVE-2024-13361 | AP AI Puffer – Your AI engine for WordPress (formerly AI Power) senols | 8.8 | Jan 22 | AI Power: Complete AI Pack <= 1.8.96 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution |
| CVE-2024-10392 | AP AI Puffer – Your AI engine for WordPress (formerly AI Power) senols | 9.8 | Oct 31 | AI Power: Complete AI Pack <= 1.8.89 - Unauthenticated Arbitrary File Upload |