Skip to content
Sign in
9.8 Critical

CVE-2025-1093 The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…

Description

The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Affected products and versions

Product Affected versions Fixed in
AI Hub - Startup & Technology WordPress Theme 1.3 earliest → 1.3.7 No fix stated

Other CVEs of AI Hub - Startup & Technology WordPress Theme

The 2 CVEs of AI Hub - Startup & Technology WordPress Theme →
CVE-2025-0951 Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing… 4.3 Medium
Track this CVE