CVE-2025-0428

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-0428", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-01-13T16:54:57.091Z", "datePublished": "2025-01-22T07:29:40.161Z", "dateUpdated": "2026-04-08T16:58:02.855Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:58:02.855Z"}, "affected": [{"vendor": "senols", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.8.96", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}], "title": "AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66a3abc1-0508-4ce3-952b-7dbf3738879a?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3224162/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "cweId": "CWE-502", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tran Anh Duc"}], "timeline": [{"time": "2025-01-21T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-22T14:26:19.252988Z", "id": "CVE-2025-0428", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-22T14:26:28.463Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0428", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-22T14:26:19.252988Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-22T14:26:24.533Z"}}], "cna": {"title": "AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_prompts", "credits": [{"lang": "en", "type": "finder", "value": "Tran Anh Duc"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "senols", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.8.96"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-01-21T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66a3abc1-0508-4ce3-952b-7dbf3738879a?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3224162/"}], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:58:02.855Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0428", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:58:02.855Z", "dateReserved": "2025-01-13T16:54:57.091Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-01-22T07:29:40.161Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "vendor": "senols", "versions": [{"lessThanOrEqual": "1.8.96", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aipower:aipower:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "8C5CA64C-4781-4A74-AF0D-228633421634", "versionEndExcluding": "1.8.97", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}, {"lang": "es", "value": "El complemento \"AI Power: Complete AI Pack\" para WordPress es vulnerable a la inyecci\u00f3n de objetos PHP en versiones hasta la 1.8.96 y incluida, mediante la deserializaci\u00f3n de la entrada no confiable de la variable $form['post_content'] a trav\u00e9s de la funci\u00f3n wpaicg_export_prompts. Esto permite a atacantes autenticados, con privilegios administrativos, inyectar un objeto PHP. No hay ninguna cadena POP presente en el complemento vulnerable. Si hay una cadena POP presente a trav\u00e9s de un complemento o tema adicional instalado en el sistema de destino, podr\u00eda permitir al atacante eliminar archivos arbitrarios, recuperar datos confidenciales o ejecutar c\u00f3digo."}], "id": "CVE-2025-0428", "lastModified": "2026-06-17T08:26:27.447", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0428", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-01-22T14:26:19.252988Z", "version": "2.0.3"}}]}, "published": "2025-01-22T08:15:09.013", "references": [{"source": "security@wordfence.com", "tags": ["Patch"], "url": "https://plugins.trac.wordpress.org/changeset/3224162/"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66a3abc1-0508-4ce3-952b-7dbf3738879a?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T13:31:21.931304+00:00", "value": {"mitigation_remediation": ["Upgrade the AI Power plugin to a version newer than 1.8.96 or uninstall it if no longer needed", "Restrict administrative access to trusted users and remove unnecessary admin accounts", "Audit and remove any plugins or themes that could supply a POP chain and are vulnerable to deserialization attacks"], "summary": {"action": "Patch", "impact": "PHP Object Injection"}, "threat_synthesis": {"affected_systems": "WordPress sites running the senols AI Puffer (formerly AI Power) plugin at version 1.8.96 or earlier are impacted. The specific vendor is senols, and the plugin is known as AI Puffer. No additional version details beyond 1.8.96 are listed.", "description_and_impact": "The \"AI Power: Complete AI Pack\" WordPress plugin has a PHP Object Injection flaw in versions up to 1.8.96. The vulnerability arises when the plugin deserializes data from the $form['post_content'] variable within the wpaicg_export_prompts function, allowing an attacker to inject a PHP object. While no point of presentation (POP) chain exists within the plugin itself, the presence of a POP chain elsewhere\u2014such as in another plugin or active theme\u2014could turn the injection into code execution, arbitrary file deletion, or sensitive data exfiltration.", "risk_and_exploitability": "The CVSS base score of 7.2 indicates a medium\u2011high severity. The EPSS score of less than 1% suggests a very low likelihood of exploitation, and the vulnerability is not currently listed in the CISA KEV catalog. Attackers must be authenticated as administrators to exploit the flaw, making the requirement of administrative privileges a significant mitigating factor. Nevertheless, if an attacker obtains admin rights and a POP chain is present via another component, the impact could expand to full code execution or data loss."}}}}, "created": "2026-04-22T13:45:18.281528+00:00", "updated": "2026-04-22T13:45:18.281539+00:00", "vendors": []}