Threats tagged 'ghsa-2gq9-2c38-4pvg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2025-8084The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including Medium6.82025-11-18GCVE DatabaseCVE-2025-8084 The AI Engine plugin for WordPress contains a Server-Side Request Forgery (SSRF) vulnerability in all versions up to and including 3.1.8. This vulnerability exists in the rest_helpers_create_images function and allows authenticated users with Editor-level or higher privileges to make arbitrary web requests from the server. On cloud-hosted instances, this can lead to retrieval of sensitive metadata. Report on CVE-2025-8084 Vulnerability CWE-918 #ghsa-2gq9-2c38-4pvg	GCVE Database	2025-11-18

Page 1 of 1