CVE-2024-49671 CRITICAL

CVE-2024-49671: WordPress AI Postpix plugin <= 1.1.8 - Arbitrary File Upload vulnerability

Vendor Dogu Pekgoz
Product AI Image Generator for Your Content & Featured Images – AI Postpix
Weakness CWE-434 · Unrestricted file upload
Published October 23, 2024
Last update April 29, 2026
View on NVD All CVEs

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featured Images – AI Postpix ai-postpix allows Upload a Web Shell to a Web Server.This issue affects AI Image Generator for Your Content & Featured Images – AI Postpix: from n/a through <= 1.1.8.

Key dates

02Disclosure timeline

October 23, 2024 CVE published
April 29, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-5919 SourceCodester Company Website CMS Create Blog Page createblog unrestricted upload CVE-2025-10763 academico-sis academico Profile Picture edit-photo unrestricted upload CVE-2024-56054 WordPress WPLMS plugin < 1.9.9.5.2 - Instructor+ Arbitrary File Upload vulnerability CVE-2025-32579 WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload