Cross-Site Request Forgery Vulnerability in AI Image Lab Plugin for WordPress

CVE-2025-4592

What is CVE-2025-4592?

The AI Image Lab – Free AI Image Generator plugin for WordPress has a Cross-Site Request Forgery vulnerability due to inadequate nonce validation on the 'wpz-ai-images' administrative page. This security issue allows unauthenticated attackers to manipulate the plugin’s API key by crafting a malicious request that an administrator may inadvertently execute, particularly by clicking on a deceptive link. Users of affected versions should take proactive steps to mitigate this risk.

References