Essential Blocks < 6.1.4 - Author+ Server-Side Request Forgery via AI Image Generation

Description

The plugin is vulnerable to Server-Side Request Forgery via the `save_ai_generated_image()` function due to insufficient validation of a user-supplied URL. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application, which can be used to query and modify information from internal services.