CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allows Upload a Web Shell to a Web Server.This issue affects AI Image Generator for Your Content & Featured Images – AI Postpix: from n/a through <= 1.1.8.
Explanation of Vulnerability in Simple Terms
AI Postpix, a WordPress plugin for generating AI images, contains an unrestricted file upload vulnerability in versions up to 1.1.8. An authenticated user with low privileges can upload arbitrary files to the server without validation, potentially gaining control of the site. The vulnerability affects confidentiality, integrity, and availability of the entire WordPress installation.
What an attacker can do
Upload arbitrary files to the server and execute code on the site.
Potential impact on your site
A compromised user account can lead to full site takeover, data theft, and malware installation.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., contributor or subscriber).
Key dates
External resources
Related vulnerabilities
