Input validation vulnerability in AI Power: Complete AI Pack 1.8.96

The “AI Power: Complete AI Pack” plugin for WordPress has a security vulnerability in versions 1.8.96 and below. This vulnerability is caused by untrusted input from the $form[‘post_content’] variable being deserialized in the wpaicg_export_prompts function. It allows attackers who are logged in and have administrative privileges to inject a PHP Object. This can be dangerous if the target system has other vulnerable plugins or themes, as it could allow the attacker to delete files, access sensitive information, or execute code.