CVE-2025-0429

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-0429", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-01-13T16:56:10.632Z", "datePublished": "2025-01-22T07:29:40.953Z", "dateUpdated": "2026-04-08T17:18:30.901Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:30.901Z"}, "affected": [{"vendor": "senols", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.8.96", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}], "title": "AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb927aba-a96d-47b9-ba35-60945ea5cfe5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3224162/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "cweId": "CWE-502", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tran Anh Duc"}], "timeline": [{"time": "2025-01-21T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-22T14:23:09.792843Z", "id": "CVE-2025-0429", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-22T14:23:17.631Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0429", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-22T14:23:09.792843Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-22T14:23:14.041Z"}}], "cna": {"title": "AI Power: Complete AI Pack <= 1.8.96 - Authenticated (Admin+) PHP Object Injection via wpaicg_export_ai_forms", "credits": [{"lang": "en", "type": "finder", "value": "Tran Anh Duc"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "senols", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.8.96"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-01-21T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb927aba-a96d-47b9-ba35-60945ea5cfe5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3224162/"}], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-502", "description": "CWE-502 Deserialization of Untrusted Data"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:30.901Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0429", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:18:30.901Z", "dateReserved": "2025-01-13T16:56:10.632Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-01-22T07:29:40.953Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "AI Puffer \u2013 Your AI engine for WordPress (formerly AI Power)", "vendor": "senols", "versions": [{"lessThanOrEqual": "1.8.96", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aipower:aipower:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "8C5CA64C-4781-4A74-AF0D-228633421634", "versionEndExcluding": "1.8.97", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The \"AI Power: Complete AI Pack\" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code."}, {"lang": "es", "value": "El complemento \"AI Power: Complete AI Pack\" para WordPress es vulnerable a la inyecci\u00f3n de objetos PHP en versiones hasta la 1.8.96 y incluida, mediante la deserializaci\u00f3n de una entrada no confiable de la variable $form['post_content'] a trav\u00e9s de la funci\u00f3n wpaicg_export_ai_forms(). Esto permite a atacantes autenticados, con privilegios administrativos, inyectar un objeto PHP. No hay ninguna cadena POP presente en el complemento vulnerable. Si hay una cadena POP presente a trav\u00e9s de un complemento o tema adicional instalado en el sistema de destino, podr\u00eda permitir al atacante eliminar archivos arbitrarios, recuperar datos confidenciales o ejecutar c\u00f3digo."}], "id": "CVE-2025-0429", "lastModified": "2026-06-17T08:26:27.557", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0429", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-01-22T14:23:09.792843Z", "version": "2.0.3"}}]}, "published": "2025-01-22T08:15:09.173", "references": [{"source": "security@wordfence.com", "tags": ["Patch"], "url": "https://plugins.trac.wordpress.org/changeset/3224162/"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb927aba-a96d-47b9-ba35-60945ea5cfe5?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-502"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T22:27:51.808470+00:00", "value": {"mitigation_remediation": ["Update the AI Power: Complete AI Pack plugin to a version newer than 1.8.96.", "If an update is not yet available, consider disabling or removing the plugin entirely until a patch is released. If the function must remain, restrict the export functionality to trusted users only and remove or block the use of wpaicg_export_ai_forms. ", "Review all installed themes and plugins for other PHP Object Injection or POP vulnerabilities, and apply patches or remove those components to eliminate the possibility of a chained exploitation."], "summary": {"action": "Immediate Patch", "impact": "Potential Code Execution or Data Loss via PHP Object Injection"}, "threat_synthesis": {"affected_systems": "WordPress sites running the AI Power: Complete AI Pack plugin version 1.8.96 or earlier, developed by senols under the brand AI Puffer \u2013 Your AI engine for WordPress, are impacted. The vulnerability is present in all affected releases regardless of the site's configuration, as long as an administrator can trigger the export function.", "description_and_impact": "The AI Power: Complete AI Pack plugin contains a PHP Object Injection flaw that arises when attacker\u2011controlled data from the $form['post_content'] field is deserialized in the wpaicg_export_ai_forms() function. The flaw requires the attacker to have administrative privileges on the WordPress site. While the plugin itself does not implement a PHP Object Power (POP) chain, the injected object can be leveraged by a POP chain introduced in another plugin or theme to delete arbitrary files, read sensitive data, or execute arbitrary code, thereby compromising confidentiality, integrity, or availability of the site.", "risk_and_exploitability": "The CVSS score of 7.2 indicates a high severity. The EPSS score of less than 1% suggests that exploitation is currently unlikely but should not be discounted, especially in environments where the attacker already has administrative credentials. The vulnerability is not listed in the CISA KEV catalog. An effective attack would require the presence of an additional POP chain; if none exists, the risk is lower. However, many WordPress installations host multiple plugins and themes, making a POP chain a realistic scenario. Administrators should therefore assume a potentially significant threat if the site is not already protected against such injection attacks."}}}}, "created": "2026-04-21T22:30:06.138369+00:00", "updated": "2026-04-21T22:30:06.138381+00:00", "vendors": []}