CVE Database /
CVE-2024-52377
CVE · Critical
CVE-2024-52377 — Instant AI Image Generator – Create & Import Images [ai-image] < 1.5.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-52377
|
Instant AI Image Generator – Create & Import Images [ai-image] < 1.5.3 |
Unrestricted Upload of File with Dangerous Type |
Critical
10.0
|
< 1.5.3
|
1.5.3 |
2024-11-11 |
—
|
CVE-2024-52377
The Instant Image Generator plugin for WordPress contains a file upload vulnerability in versions 1.5.2 and earlier caused by inadequate validation of uploaded file types. An attacker without authentication can exploit this flaw to upload arbitrary files to the server, potentially enabling remote code execution on the affected website.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings