CVE-2024-10499

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks...

WordPress AI Engine plugin < 2.4.8 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Karolis Narvilas in WordPress Plugin AI Engine versions 2.4.8...

WordPress plugin AI Engine 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-37638 · WordPress +1 · Ai Engine Wordpress Plugin +1

Name of the Vulnerable Software and Affected Versions: AI Engine versions 2.4.3 AI Engine WordPress plugin versions prior to 2.5.1 Description: The issue is related to remote-code-execution RCE via Log Poisoning. The AI Engine WordPress plugin fails to validate the file extension of logs path,...

CVE-2024-34440 WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63...

Input validation

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'addimagefromurl' function in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with...