WP Clinic
Log in Sign up

CVE · Medium

CVE-2026-57413 — Instant AI Image Generator – Create & Import Images [ai-image] < 2.1.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57413 Instant AI Image Generator – Create & Import Images [ai-image] < 2.1.5 Medium 6.4 < 2.1.5 2.1.5 2026-07-08

CVE-2026-57413

The Instant AI Image Generator – Create & Import Images plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.