Instant AI Image Generator – Create & Import Images <= 2.1.4 - Authenticated (Subscriber+) Server-Side Request Forgery
medium
The Instant AI Image Generator – Create & Import Images plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from...
- CVSS:
- 6.4
- Affected:
- up to 2.1.4
- Fixed in:
- 2.1.5
- Disclosed:
- Jul 8, 2026
CVE-2026-57413 on NVD →
Instant Image Generator <= 1.5.2 - Unauthenticated Arbitrary File Upload
critical
The Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in a function in all versions up to, and including, 1.5.2. This makes it possible for unauthenticated attackers to upload arbitrary files...
- CVSS:
- 9.8
- Affected:
- up to 1.5.2
- Fixed in:
- 1.5.3
- Disclosed:
- Nov 11, 2024
CVE-2024-52377 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database