Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| LiquidThemes | AI Hub - Startup & Technology WordPress Theme | unaffected |
|
No data.
No data.
No data available yet.
No remediation available yet.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-15129 | The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. |
Mon, 21 Apr 2025 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Sat, 19 Apr 2025 03:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. | |
| Title | AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image | |
| Weaknesses | CWE-434 | |
| References |
| |
| Metrics |
cvssV3_1
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2026-04-08T16:34:31.588Z
Reserved: 2025-02-06T19:54:04.137Z
Link: CVE-2025-1093
Vulnrichment
Updated: 2025-04-21T02:43:43.691Z
NVD
Status : Awaiting Analysis
Published: 2025-04-19T04:15:21.733
Modified: 2025-04-21T14:23:45.950
Link: CVE-2025-1093
Redhat
No data.
OpenCVE Enrichment
No data.