WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-engine
Published
2023-05-30
Title
AI-Engine < 1.6.83 - Admin+ Stored XSS
Slug
ai-engine
Published
2024-01-09
Title
AI Engine: ChatGPT Chatbot < 1.9.99 - Unauthenticated Arbitrary File Upload
Slug
ai-engine
Published
2024-01-18
Title
AI Engine < 2.1.5 - Editor+ Arbitrary File Upload via add_image_from_url
Slug
ai-engine
Published
2024-03-01
Title
AI Engine < 2.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
ai-engine
Published
2024-03-26
Title
AI Engine < 2.1.5 - Authenticated (Editor+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-05-07
Title
AI Engine: ChatGPT Chatbot < 2.2.70 - Authenticated (Editor+) Arbitrary File Upload
Slug
ai-engine
Published
2024-07-29
Title
AI Engine < 2.5.1 - Admin+ RCE
Slug
ai-engine
Published
2024-07-22
Title
AI Engine < 2.4.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-08-22
Title
AI Engine < 2.4.8 - Admin+ SQLi
Slug
ai-engine
Published
2024-11-21
Title
AI-Engine < 2.6.5 - Admin+ SQLi
Slug
ai-engine
Published
2025-06-18
Title
AI Engine 2.8.0 - 2.8.3 - Subscriber+ Privilege Escalation via MCP
Slug
ai-engine
Published
2025-07-03
Title
AI Engine 2.8.4 - Insecure OAuth Implementation
Slug
ai-engine
Published
2025-07-07
Title
AI Engine < 2.8.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Slug
ai-engine
Published
2025-07-23
Title
AI Engine < 2.9.5 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Slug
ai-engine
Published
2025-07-30
Title
AI Engine 2.9.3 - 2.9.4 - Subscriber+ Arbitrary File Upload
Slug
ai-engine
Published
2025-09-03
Title
Ai Engine < 2.9.6 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion
Slug
ai-engine
Published
2025-11-04
Title
AI Engine < 3.1.4 - Unauthenticated Privilege Escalation
Slug
ai-engine
Published
2025-11-12
Title
AI Engine < 3.1.9 - Subscriber+ PHP Object Injection via PHAR Deserialization
Slug
ai-engine
Published
2025-11-18
Title
AI Engine < 3.1.9 - Authenticated (Editor+) Server-Side Request Forgery
Slug
ai-engine
Published
2026-01-27
Title
AI Engine < 3.3.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-engine
Published
2026-01-27
Title
AI Engine < 3.3.3 - Editor+ Arbitrary File Upload
Slug
ai-engine
Published
2026-02-25
Title
AI Engine < 3.3.3 - Editor+ Arbitrary File Upload
Slug
ai-engine
Published
2026-05-16
Title
AI Engine 3.4.9 - Subscriber+ Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token
Slug
ai-engine
Published
2026-05-28
Title
AI Engine – The Chatbot, AI Framework & MCP for WordPress < 3.5.0 - Editor+ Privilege Escalation
Slug
ai-engine
Published
2026-06-23
Title
AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal