Aller au contenu
en Se connecter
7.2 Élevée

CVE-2024-6451 AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning

Description

AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path", allowing Administrators to change log filetypes from .log to .php.

Produits et versions touchés

Produit Versions touchées Corrigé en
AI Engine 2.5 premières → < 2.5.1 2.5.1
ai_engine 2.5 premières → < 2.5.1 2.5.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de AI Engine

Les 14 CVE de AI Engine →
CVE-2026-110982 The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object… 4.9 Moyenne CVE-2026-111041 The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management… 4.9 Moyenne CVE-2026-110976 The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs… 4.9 Moyenne CVE-2026-75798 The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only… 5.3 Moyenne
Suivre cette CVE