deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-30158
Published: 2025-04-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the forum allows users to post iframe elements inside forum topics/comments/feed with no restriction on the iframe's width and height attributes. This allows an authenticated attacker to perform a UI-based denial of service (DoS) by injecting oversized iframes that block the forum UI and disrupt normal user interactions. This issue has been patched in version 2.2.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-400
References: https://github.com/NamelessMC/Nameless/commit/caa42a975338a13fbc1658e8c440108f16135643; https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-2prx-rgr7-hq5f
CVE: CVE-2025-30357
Published: 2025-04-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0.
CVSS Score: 7.3 (HIGH)
CWE: CWE-706
References: https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7f; https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8h
CVE: CVE-2025-31118
Published: 2025-04-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations. This issue has been patched in version 2.2.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-400
References: https://github.com/NamelessMC/Nameless/commit/51e9d93aaa28d40f060b807533d22b768abea207; https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-jhvp-mwj4-922m
CVE: CVE-2025-31120
Published: 2025-04-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, an insecure view count mechanism in the forum page allows an unauthenticated attacker to artificially increase the view count. The application relies on a client-side cookie (nl-topic-[tid]) (or session variable for guests) to determine if a view should be counted. When a client does not provide the cookie, every page request increments the counter, leading to incorrect view metrics. This issue has been patched in version 2.2.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-565, CWE-565
References: https://github.com/NamelessMC/Nameless/commit/9b112c0beab346a38b6f5a51e7773b38c6fc52e7; https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-8jv7-77jw-h646
CVE: CVE-2025-32389
Published: 2025-04-18
Description: NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC is vulnerable to SQL injection by providing an unexpected square bracket GET parameter syntax. Square bracket GET parameter syntax refers to the structure `?param[0]=a&param[1]=b&param[2]=c` utilized by PHP, which is parsed by PHP as `$_GET['param']` being of type array. This issue has been patched in version 2.1.4.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/NamelessMC/Nameless/commit/02c81c7c45b98fad1ebe3bc085efae18aec4566f; https://github.com/NamelessMC/Nameless/releases/tag/v2.1.4; https://github.com/NamelessMC/Nameless/security/advisories/GHSA-5984-mhcp-cq2x
CVE: CVE-2025-32434
Published: 2025-04-18
Description: PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution (RCE) vulnerability exists in PyTorch when loading a model using torch.load with weights_only=True. This issue has been patched in version 2.6.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/pytorch/pytorch/security/advisories/GHSA-53q9-r3pm-6pq6; https://lists.debian.org/debian-lts-announce/2025/12/msg00000.html
CVE: CVE-2025-32442
Published: 2025-04-18
Description: Fastify is a fast and low overhead web framework, for Node.js. In versions 5.0.0 to 5.3.0 as well as version 4.29.0, applications that specify different validation strategies for different content types have a possibility to bypass validation by providing a _slightly altered_ content type such as with different casing or altered whitespacing before `;`. This was patched in v5.3.1, but the initial patch did not cover all problems. This has been fully patched in v5.3.2 and v4.29.1. A workaround involves not specifying individual content types in the schema.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1287
References: https://github.com/fastify/fastify/commit/436da4c06dfbbb8c24adee3a64de0c51e4f47418; https://github.com/fastify/fastify/commit/f3d2bcb3963cd570a582e5d39aab01a9ae692fe4; https://github.com/fastify/fastify/security/advisories/GHSA-mg2h-6x62-wpwc
CVE: CVE-2025-32792
Published: 2025-04-18
Description: SES safely executes third-party JavaScript 'strict' mode programs in compartments that have no excess authority in their global scope. Prior to version 1.12.0, web pages and web extensions using `ses` and the Compartment API to evaluate third-party code in an isolated execution environment that have also elsewhere used `const`, `let`, and `class` bindings in the top-level scope of a `<script>` tag will have inadvertently revealed these bindings in the lexical scope of third-party code. This issue has been patched in version 1.12.0. Workarounds for this issue involve either avoiding top-level `let`, `const`, or `class` bindings in `<script>` tags, or change these to `var` bindings to be reflected on `globalThis`.
CWE: CWE-497
References: https://github.com/endojs/endo/security/advisories/GHSA-h9w6-f932-gq62
CVE: CVE-2025-32795
Published: 2025-04-18
Description: Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted permissions to edit APP names, descriptions and icons. This access control flaw allows non-admin users to modify app details, despite being restricted from viewing apps, which poses a security risk to the integrity of the application. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can modify app details.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/langgenius/dify/pull/5266; https://github.com/langgenius/dify/security/advisories/GHSA-gg5w-m2vw-vmmj; https://github.com/langgenius/dify/security/advisories/GHSA-gg5w-m2vw-vmmj
CVE: CVE-2025-32796
Published: 2025-04-18
Description: Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users can enable or disable apps through the API, even though the web UI button for this action is disabled and normal users are not permitted to make such changes. This access control flaw allows non-admin users to make unauthorized changes, which can disrupt the functionality and availability of the APPS. This issue has been patched in version 0.6.12. A workaround for this vulnerability involves updating the API access control mechanisms to enforce stricter user role permissions and implementing role-based access controls (RBAC) to ensure that only users with admin privileges can send enable or disable requests for apps.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284, CWE-863
References: https://github.com/langgenius/dify/pull/5266; https://github.com/langgenius/dify/security/advisories/GHSA-hqcx-598m-pjq4; https://github.com/langgenius/dify/security/advisories/GHSA-hqcx-598m-pjq4
CVE: CVE-2024-41447
Published: 2025-04-18
Description: A stored cross-site scripting (XSS) vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the author parameter under the Create/Modify article function.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/52209
CVE: CVE-2025-28059
Published: 2025-04-18
Description: An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale token handling. When an administrator deletes a user account, the backend fails to terminate active sessions and revoke associated API tokens, enabling unauthorized access to restricted functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-613
References: https://github.com/aakashtyal/Residual-Data-Access-Post-User-Deletion-in-Nagios-Network-Analyzer-Version-2024R1; https://www.nagios.com/changelog/#network-analyze
CVE: CVE-2025-1697
Published: 2025-04-18
Description: A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://support.hp.com/us-en/document/ish_12[PII_REDACTED]9997-16/hpsbgn04008
CVE: CVE-2025-28231
Published: 2025-04-18
Description: Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28231; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28231
CVE: CVE-2025-28233
Published: 2025-04-18
Description: Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28233; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28233
CVE: CVE-2025-28235
Published: 2025-04-18
Description: An information disclosure vulnerability in the component /socket.io/1/websocket/ of Soundcraft Ui Series Model(s) Ui12 and Ui16 Firmware v1.0.7x and v1.0.5x allows attackers to access Administrator credentials in plaintext.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28235; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28235
CVE: CVE-2025-28236
Published: 2025-04-18
Description: Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-494
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28236; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28236
CVE: CVE-2025-28237
Published: 2025-04-18
Description: An issue in WorldCast Systems ECRESO FM/DAB/TV Transmitter v1.10.1 allows authenticated attackers to escalate privileges via a crafted JSON payload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28237; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28237
CVE: CVE-2025-28238
Published: 2025-04-18
Description: Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28238; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28238
CVE: CVE-2025-28242
Published: 2025-04-18
Description: Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28242; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28242
CVE: CVE-2025-29512
Published: 2025-04-18
Description: Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://nodebb.com; https://www.tonysec.com/posts/cve-2025-29512/
CVE: CVE-2025-29513
Published: 2025-04-18
Description: Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://nodebb.com; https://www.tonysec.com/posts/cve-2025-29513/
CVE: CVE-2025-24914
Published: 2025-04-18
Description: When installing Nessus to a non-default location on a Windows host, Nessus versions prior to 10.8.4 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location. - CVE-2025-24914
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.tenable.com/security/tns-2025-05
CVE: CVE-2025-28355
Published: 2025-04-18
Description: Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-352
References: https://github.com/Volmarg/personal-management-system; https://github.com/Volmarg/personal-management-system/issues/149; https://github.com/abbisQQ/CVE-2025-28355/tree/main
CVE: CVE-2024-57493
Published: 2025-04-18
Description: An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2024-57493; https://gitlab.redox-os.org/redox-os/relibc/-/issues/201; https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/566
CVE: CVE-2025-25983
Published: 2025-04-18
Description: An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component.
CVSS Score: 3.4 (LOW)
CWE: CWE-257, CWE-656
References: https://github.com/vladko312/Research_v380_IP_camera; https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25983.md
CVE: CVE-2025-25984
Published: 2025-04-18
Description: An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-259
References: https://github.com/vladko312/Research_v380_IP_camera; https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25984.md
CVE: CVE-2025-25985
Published: 2025-04-18
Description: An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via the /mnt/mtd/mvconf/wifi.ini and /mnt/mtd/mvconf/user_info.ini components.
CVSS Score: 2.6 (LOW)
CWE: CWE-256
References: https://github.com/vladko312/Research_v380_IP_camera; https://github.com/vladko312/Research_v380_IP_camera/blob/main/CVE-2025-25985.md
CVE: CVE-2025-28197
Published: 2025-04-18
Description: Crawl4AI <=0.4.247 is vulnerable to SSRF in /crawl4ai/async_dispatcher.py.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://gist.github.com/AndrewDzzz/f49e79b09ce0643ee1fc2a829e8875e0
CVE: CVE-2025-32377
Published: 2025-04-18
Description: Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs). A vulnerability has been identified in Rasa Pro where voice connectors in Rasa Pro do not properly implement authentication even when a token is configured in the credentials.yml file. This could allow an attacker to submit voice data to the Rasa Pro assistant from an unauthenticated source. This issue has been patched for audiocodes, audiocodes_stream, and genesys connectors in versions 3.9.20, 3.10.19, 3.11.7 and 3.12.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: https://github.com/RasaHQ/security-advisories/security/advisories/GHSA-7xq5-54jp-2mfg
CVE: CVE-2025-36625
Published: 2025-04-18
Description: In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-117
References: https://www.tenable.com/security/tns-2025-05
CVE: CVE-2025-3795
Published: 2025-04-18
Description: A vulnerability was found in DaiCuo 1.3.13. It has been rated as problematic. Affected by this issue is some unknown functionality of the component SEO Optimization Settings Section. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/daicuo/cms/issues/1; https://vuldb.com/?ctiid.305648; https://vuldb.com/?id.305648
CVE: CVE-2024-53591
Published: 2025-04-18
Description: An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/aljoharasubaie/CVE-2024-53591
CVE: CVE-2025-29058
Published: 2025-04-18
Description: An issue in Qimou CMS v.3.34.0 allows a remote attacker to execute arbitrary code via the upgrade.php component.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://cdn.wjlin0.com/halo-img/74CMSv3.34.0%E5%AD%98%E5%9C%A8%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.zip
CVE: CVE-2025-32953
Published: 2025-04-18
Description: z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU. In version 1.38 and prior, the `makefile-ubuntu.yml` workflow file uses `actions/upload-artifact@v4` to upload the `z80pack-ubuntu` artifact. This artifact is a zip of the current directory, which includes the automatically generated `.git/config` file containing the run's GITHUB_TOKEN. Seeing as the artifact can be downloaded prior to the end of the workflow, there is a few seconds where an attacker can extract the token from the artifact and use it with the Github API to push malicious code or rewrite release commits in your repository. This issue has been fixed in commit bd95916.
CVSS Score: 8.7 (HIGH)
CWE: CWE-200
References: https://github.com/udo-munk/z80pack/commit/1e06c2fe498ca772002b5c4f6f9e3085061e47da; https://github.com/udo-munk/z80pack/commit/836c2e37b54f86bb4bed9e1406b67e52aa52308d; https://github.com/udo-munk/z80pack/commit/95535987d690bd20849fbf143f267283f0e2db91
CVE: CVE-2025-3796
Published: 2025-04-18
Description: A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/contact-us.php. The manipulation of the argument pagetitle/pagedes/email/mobnumber/timing leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/yaklang/IRifyScanResult/blob/main/Men-Salon-Management-System/sql_inject_in_contact_us.md; https://phpgurukul.com/; https://vuldb.com/?ctiid.305649
CVE: CVE-2025-43903
Published: 2025-04-18
Description: NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-347
References: https://gitlab.freedesktop.org/poppler/poppler/-/commit/f1b9c830f145a0042e853d6462b2f9ca4016c669
CVE: CVE-2025-2010
Published: 2025-04-19
Description: The JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin plugin for WordPress is vulnerable to SQL Injection via the 'jobwp_upload_resume' parameter in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/3271612/jobwp/tags/2.4.0/core/job_application.php?old=3230672&old_path=jobwp%2Ftags%2F2.3.9%2Fcore%2Fjob_application.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/b3b658f0-b9d8-4b7f-8d40-39ce185ef797?source=cve
CVE: CVE-2025-3278
Published: 2025-04-19
Description: The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_register_role' field. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://themeforest.net/item/urbango-directory-and-listing-wordpress-theme/22712624; https://www.wordfence.com/threat-intel/vulnerabilities/id/913ffe0c-c8f8-4cda-be9a-96c056d4c4a8?source=cve
CVE: CVE-2025-3284
Published: 2025-04-19
Description: The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.3. This is due to missing or incorrect nonce validation on the user_registration_pro_delete_account() function. This makes it possible for unauthenticated attackers to force delete users, including administrators, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpuserregistration.com/changelog/; https://www.wordfence.com/threat-intel/vulnerabilities/id/4616b609-e8dc-4004-a5b7-2de3e83719be?source=cve
CVE: CVE-2025-1093
Published: 2025-04-19
Description: The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://themeforest.net/item/ai-hub-startup-technology-wordpress-theme/47473638; https://www.wordfence.com/threat-intel/vulnerabilities/id/09adfe7e-f154-4143-827f-957ded3ffc8f?source=cve