<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: aipower</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-0429: The &quot;AI Power: Complete AI Pack&quot; plugin for WordPress is vulnerable to PHP Object Injection in versions up to,</title><link>https://patchthecve.com/cve/CVE-2025-0429.html</link><guid>https://patchthecve.com/cve/CVE-2025-0429.html</guid><pubDate>Wed, 17 Jun 2026 08:26:27 +0000</pubDate><description>HIGH 7.2: The &quot;AI Power: Complete AI Pack&quot; plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form[&#x27;post_content&#x27;] variable through the wpaicg_export_ai_forms() function. This allows authenticated attackers, with</description></item><item><title>CVE-2025-0428: The &quot;AI Power: Complete AI Pack&quot; plugin for WordPress is vulnerable to PHP Object Injection in versions up to,</title><link>https://patchthecve.com/cve/CVE-2025-0428.html</link><guid>https://patchthecve.com/cve/CVE-2025-0428.html</guid><pubDate>Wed, 17 Jun 2026 08:26:27 +0000</pubDate><description>HIGH 7.2: The &quot;AI Power: Complete AI Pack&quot; plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form[&#x27;post_content&#x27;] variable through the wpaicg_export_prompts function. This allows authenticated attackers, with ad</description></item><item><title>CVE-2024-13361: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capa</title><link>https://patchthecve.com/cve/CVE-2024-13361.html</link><guid>https://patchthecve.com/cve/CVE-2024-13361.html</guid><pubDate>Wed, 17 Jun 2026 07:01:51 +0000</pubDate><description>MEDIUM 6.3: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpaicg_save_image_media function in all versions up to, and including, 1.8.96. This makes it possible for authenticated attackers, with Subscriber-level access and above,</description></item><item><title>CVE-2024-13360: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versio</title><link>https://patchthecve.com/cve/CVE-2024-13360.html</link><guid>https://patchthecve.com/cve/CVE-2024-13360.html</guid><pubDate>Wed, 17 Jun 2026 07:01:51 +0000</pubDate><description>MEDIUM 5.4: The AI Power: Complete AI Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.8.96 via the wpaicg_troubleshoot_add_vector(). This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to </description></item><item><title>CVE-2024-37465: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in S</title><link>https://patchthecve.com/cve/CVE-2024-37465.html</link><guid>https://patchthecve.com/cve/CVE-2024-37465.html</guid><pubDate>Wed, 17 Jun 2026 07:38:25 +0000</pubDate><description>MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or &#x27;Cross-site Scripting&#x27;) vulnerability in Senol Sahin GPT3 AI Content Writer allows Stored XSS.This issue affects GPT3 AI Content Writer: from n/a through 1.8.66.</description></item></channel></rss>