WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ai-engine
Published
2024-01-18
Title
AI Engine < 2.1.5 - Editor+ Arbitrary File Upload via add_image_from_url
Slug
ai-engine
Published
2024-03-01
Title
AI Engine < 2.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
ai-engine
Published
2024-03-26
Title
AI Engine < 2.1.5 - Authenticated (Editor+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-05-07
Title
AI Engine: ChatGPT Chatbot < 2.2.70 - Authenticated (Editor+) Arbitrary File Upload
Slug
ai-engine
Published
2024-07-29
Title
AI Engine < 2.5.1 - Admin+ RCE
Slug
ai-engine
Published
2024-07-22
Title
AI Engine < 2.4.8 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-engine
Published
2024-08-22
Title
AI Engine < 2.4.8 - Admin+ SQLi
Slug
ai-engine
Published
2024-11-21
Title
AI-Engine < 2.6.5 - Admin+ SQLi
Slug
ai-engine
Published
2025-06-18
Title
AI Engine 2.8.0 - 2.8.3 - Subscriber+ Privilege Escalation via MCP
Slug
ai-engine
Published
2025-07-03
Title
AI Engine 2.8.4 - Insecure OAuth Implementation
Slug
ai-engine
Published
2025-07-07
Title
AI Engine < 2.8.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Slug
ai-engine
Published
2025-07-23
Title
AI Engine < 2.9.5 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
Slug
ai-engine
Published
2025-07-30
Title
AI Engine 2.9.3 - 2.9.4 - Subscriber+ Arbitrary File Upload
Slug
ai-engine
Published
2025-09-03
Title
Ai Engine < 2.9.6 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion
Slug
ai-engine
Published
2025-11-04
Title
AI Engine < 3.1.4 - Unauthenticated Privilege Escalation
Slug
ai-engine
Published
2025-11-12
Title
AI Engine < 3.1.9 - Subscriber+ PHP Object Injection via PHAR Deserialization
Slug
ai-engine
Published
2025-11-18
Title
AI Engine < 3.1.9 - Authenticated (Editor+) Server-Side Request Forgery
Slug
ai-engine
Published
2026-01-27
Title
AI Engine < 3.3.3 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
ai-engine
Published
2026-01-27
Title
AI Engine < 3.3.3 - Editor+ Arbitrary File Upload
Slug
ai-feeds
Published
2025-11-25
Title
AI Feeds < 1.0.12 - Unauthenticated Arbitrary File Upload
Slug
ai-feeds
Published
2025-12-11
Title
AI Feeds < 1.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aife_post_meta' Shortcode
Slug
ai-for-seo
Published
2025-01-06
Title
AI for SEO < 1.2.10 - Missing Authorization
Slug
ai-image
Published
2024-11-11
Title
Instant Image Generator < 1.5.3 - Unauthenticated Arbitrary File Upload
Slug
ai-image-alt-text-generator-for-wp
Published
2025-01-30
Title
Ai Image Alt Text Generator for WP < 1.0.7 - Reflected Cross-Site Scripting
Slug
ai-image-alt-text-generator-for-wp
Published
2025-04-04
Title
Ai Image Alt Text Generator for WP < 1.1.2 - Missing Authorization