cbcvebase.

Allimages All-Images.Ai Ia Image Bank And Custom Image Creation vulnerabilities

1 known vulnerability affecting allimages/all-images.ai_ia_image_bank_and_custom_image_creation.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-13714P2HIGHCVSS 8.8≤ 1.0.42025-02-12
CVE-2024-13714 [HIGH] CWE-434 CVE-2024-13714: The All-Images.ai – IA Image Bank and Custom Image creation plugin for WordPress is vulnerable to ar The All-Images.ai – IA Image Bank and Custom Image creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the '_get_image_by_url' function in all versions up to, and including, 1.0.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary fil
nvd
Allimages All-Images.Ai Ia Image Bank And Custom Image Creation vulnerabilities | cvebase