CVE-2025-1093

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 434

Summary

CVE-2025-1093 is a vulnerability affecting the AIHub theme for WordPress. This issue stems from a lack of file type validation in the generate_image function, which is present in all versions up to 1.3.7. An attacker can exploit this vulnerability to upload arbitrary files on the affected site's server, potentially leading to remote code execution, putting sensitive data at risk. Unauthenticated attackers can take advantage of this flaw, making it crucial for WordPress users to update their AIHub theme as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share