AI Engine - The Chatbot, AI Framework & MCP for WordPress vulnerabilities

Known security issues in the AI Engine - The Chatbot, AI Framework & MCP for WordPress WordPress plugin, by affected version, with severity, CVE and the version that fixes each one.

Plugin slug: ai-engine
Latest version: 3.8.6
Active installs: 90,000+
Known vulnerabilities: 41
Data updated: 2026-10-17 07:30 UTC

View on wordpress.org

Check your version

This information comes from public vulnerability databases and may be incomplete or out of date. A plugin with no known vulnerabilities is not proof that it is secure; keep plugins updated and remove the ones you do not use.

Fixed in version 4.7.8 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 4.7.8
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin < 4.7.8 is vulnerable to Cross Site Scripting (XSS) CVE-2023-4253 · Source	Medium	4.8	< 4.7.8	2023-08-10

Fixed in version 3.8.4 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.8.4
Vulnerability	Severity	CVSS	Affected versions	Published
[en] Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3. CVE-2026-110888 · Source	Medium	4.3	< 3.8.4	2026-10-15

Fixed in version 3.8.1 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.8.1
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injection CVE-2026-96561 · Source	High	7.2	< 3.8.1	2026-09-23

Fixed in version 3.7.9 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.7.9
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.7.8 - Unauthenticated Insecure Direct Object Reference CVE-2026-93623 · Source	Medium	5.3	< 3.7.9	2026-09-14

Fixed in version 3.7.8 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.7.8
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter CVE-2026-89141 · Source	Medium	6.5	< 3.7.8	2026-08-28

Fixed in version 3.7.2 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.7.2
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine – The Chatbot, AI Framework & MCP for WordPress 3.4.0 - 3.7.1 - Missing Authorization to Unauthenticated Arbitrary AI Query Execution CVE-2026-75798 · Source	Not rated	-	< 3.7.2	2026-08-26
AI Engine – The Chatbot, AI Framework & MCP for WordPress 3.3.3 - 3.7.1 - Authenticated (Subscriber+) Arbitrary File Read CVE-2026-75797 · Source	Not rated	-	< 3.7.2	2026-08-24

Fixed in version 3.6.9 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.6.9
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting CVE-2026-65545 · Source	High	7.1	< 3.6.9	2026-07-28

Fixed in version 3.6.6 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.6.6
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match CVE-2026-15988 · Source	High	8.8	< 3.6.6	2026-07-31
[en] The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from CVE-2026-16955 · Source	Not rated	-	< 3.6.6	2026-08-08

Fixed in version 3.6.4 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.6.4
Vulnerability	Severity	CVSS	Affected versions	Published
[en] The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before deletion, authorising the action solely by a client-supplied session cookie value, so an unauthenticated attacker who obta CVE-2026-16953 · Source	Not rated	-	< 3.6.4	2026-08-08
[en] The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and a CVE-2026-16954 · Source	Not rated	-	< 3.6.4	2026-08-06

Fixed in version 3.6.1 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.6.1
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.0 - Authenticated (Administrator+) Privilege Escalation CVE-2026-75796 · Source	Not rated	-	< 3.6.1	2026-08-21

Fixed in version 3.5.5 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.5.5
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure CVE-2026-12510 · Source	Not rated	-	< 3.5.5	2026-06-25
AI Engine <= 3.5.4 - Authenticated (Editor+) Arbitrary File Write CVE-2026-12511 · Source	Not rated	-	< 3.5.5	2026-06-23

Fixed in version 3.5.0 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.5.0
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token CVE-2026-8719 · Source	High	8.8	< 3.5.0	2026-05-16
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.4.9 - Authenticated (Editor+) Privilege Escalation CVE-2026-27407 · Source	High	7.2	< 3.5.0	2026-05-28

Fixed in version 3.3.3 (3)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.3.3
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload CVE-2026-23802 · Source	Critical	9.1	< 3.3.3	2026-02-25
AI Engine <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpoint CVE-2026-1400 · Source	Not rated	-	< 3.3.3	0000-00-00
AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery CVE-2026-0746 · Source	Not rated	-	< 3.3.3	0000-00-00

Fixed in version 3.1.9 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.1.9
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization CVE-2025-12844 · Source	High	7.1	< 3.1.9	2025-11-12
AI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgery CVE-2025-8084 · Source	Not rated	-	< 3.1.9	0000-00-00

Fixed in version 3.1.4 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 3.1.4
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation CVE-2025-11749 · Source	Critical	9.8	< 3.1.4	2025-11-04

Fixed in version 2.9.6 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.9.6
Vulnerability	Severity	CVSS	Affected versions	Published
Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion CVE-2025-8268 · Source	Not rated	-	< 2.9.6	0000-00-00

Fixed in version 2.9.5 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.9.5
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-7847 · Source	High	8.8	>= 2.9.3 and < 2.9.5	0000-00-00
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions CVE-2025-7780 · Source	Medium	6.5	< 2.9.5	0000-00-00

Fixed in version 2.8.5 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.8.5
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine 2.8.4 - Insecure OAuth Implementation CVE-2025-6238 · Source	High	8.0	< 2.8.5	0000-00-00
AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter CVE-2025-5570 · Source	Medium	5.4	< 2.8.5	0000-00-00

Fixed in version 2.8.4 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.8.4
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP CVE-2025-5071 · Source	High	8.8	>= 2.8.0 and < 2.8.4	0000-00-00

Fixed in version 2.6.5 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.6.5
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin < 2.6.5 is vulnerable to SQL Injection CVE-2024-10499 · Source	High	7.2	< 2.6.5	2024-11-21

Fixed in version 2.5.1 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.5.1
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin < 2.5.1 is vulnerable to Remote Code Execution (RCE) CVE-2024-6451 · Source	High	7.2	< 2.5.1	2024-07-29

Fixed in version 2.4.8 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.4.8
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.4.7 is vulnerable to Server Side Request Forgery (SSRF) CVE-2024-38791 · Source	High	7.1	< 2.4.8	2024-07-22
WordPress AI Engine: ChatGPT Chatbot Plugin < 2.4.8 is vulnerable to SQL Injection CVE-2024-6723 · Source	Medium	4.7	< 2.4.8	2024-08-22

Fixed in version 2.2.70 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.2.70
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.2.63 is vulnerable to Arbitrary File Upload CVE-2024-34440 · Source	High	7.2	< 2.2.70	2024-05-07

Fixed in version 2.2.1 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.2.1
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting CVE-2024-0378 · Source	Medium	6.1	< 2.2.1	2024-03-01

Fixed in version 2.1.5 (3)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 2.1.5
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.1.4 is vulnerable to Arbitrary File Upload CVE-2024-29100 · Source	Critical	9.1	< 2.1.5	2024-03-28
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url CVE-2024-0699 · Source	High	7.2	< 2.1.5	2024-01-18
WordPress AI Engine: ChatGPT Chatbot Plugin <= 2.1.4 is vulnerable to Server Side Request Forgery (SSRF) CVE-2024-29090 · Source	Medium	6.8	< 2.1.5	2024-03-26

Fixed in version 1.9.99 (1)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 1.9.99
Vulnerability	Severity	CVSS	Affected versions	Published
WordPress AI Engine: ChatGPT Chatbot Plugin <= 1.9.98 is vulnerable to Arbitrary File Upload CVE-2023-51409 · Source	Critical	10.0	< 1.9.99	2024-01-09

Fixed in version 1.6.83 (2)

AI Engine - The Chatbot, AI Framework & MCP for WordPress: Fixed in version 1.6.83
Vulnerability	Severity	CVSS	Affected versions	Published
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-2580 · Source	Medium	4.8	< 1.6.83	2023-05-19
WordPress AI Engine: ChatGPT Chatbot Plugin < 1.6.83 is vulnerable to Cross Site Scripting (XSS) No CVE assigned · Source	Not rated	-	< 1.6.83	2023-05-19

Check every plugin on your site automatically

Install the free Webforta WordPress Security plugin and Webforta matches every plugin, theme and WordPress version you run against known vulnerabilities, and tells you when a new one affects your site.

Start free About the WordPress plugin

Sources and attribution

Vulnerability data from WPVulnerability (WordPress, plugins, themes and server software). WPVulnerability data license.
CVE records are copyright The MITRE Corporation. CVE Terms of Use.
Known-exploited status from the CISA Known Exploited Vulnerabilities catalog. Public domain (U.S. Government work).
Plugin names, latest versions and install counts from the WordPress.org plugin directory. WordPress is a trademark of the WordPress Foundation; Webforta is not affiliated with or endorsed by WordPress.org, WPVulnerability or the sources above.