CVE-2025-11749

CVE-2025-11749 AI Engine = 3.1.3 - 未認証の機密情報漏えいから権限昇格へ ⚠️ AI Engine = 3.1.3 — 未認証の機密情報漏えい → 権限昇格 GitHub: Nxploited Telegram: @KNxploited 重要なお知らせ: 私が作成したコードを転売したり、スクリプトの名前を変更して作者を騙ったりして利益を得ようとする非倫理的な個人が多く存在します。このプロジェクトは無料であり、Khaled Alenazi Nxploited によって独占的に正式リリースされています。 🔎 概要 WordPress 用プラグイン AI...

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE エクスプロイト 著者: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 このリポジトリには、CVE-2023-51409 の概念実証エクスプロイトが含まれています。これは、AI Engine: ChatGPT Chatbot WordPress プラグインにおける認証不要の任意ファイルアップロード脆弱性であり、リモートコード実行 RCE につながります。 スクリプトの機能 このスクリプトは、認証なしで脆弱な REST エンドポイントを介...

CVE-2025-13380

AI Engine for WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Authenticated Contributor+ Arbitrary File Read The AI Engine for WordPress plugin contains a vulnerability in its image insertion feature that allows any authenticated user with post editing capabilities Contributor, Author, Editor...

Jordy Meow AI Engine - Unrestricted File Upload

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine- ChatGPT Chatbot.This issue affects AI Engine- ChatGPT Chatbot- from n/a through 1.9.98. id: CVE-2023-51409 info: name: Jordy Meow AI Engine - Unrestricted File Upload author: pussycat0x severity: critical...

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...

CVE-2026-89141

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...

CVE-2026-89141 AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...

CVE-2026-89141

CVE-2026-89141 affects the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin in all versions up to and including 3.7.7 . The vulnerability is an Insecure Direct Object Reference (IDOR) via the mediaId parameter, caused by missing validation on a user-controlled key. Authenticated a...

EUVD-2026-78296

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.7.7 via the 'mediaId' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...

CVE-2025-7847-POC

CVE-2025-7847 WordPressプラグイン 認証済み購読者による任意ファイルアップロード PoC WordPressプラグイン AI Engine 2.9.3 - 2.9.4 概念実証 この脆弱性は、「Public API」オプションが有効になっている場合にのみ悪用可能であることに注意してください。このオプションはデフォルトでは無効であり、またBearer Tokenが設定されておらず、カスタム認証が追加されてAPIを保護していない場合に限ります。 自動化バージョン root@kitploit: python3 exploit-auto.py --url...

WordPress AI Engine plugin <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability

Insecure Direct Object Reference to Authenticated Subscriber+ Sensitive Attachment Disclosure via 'mediaId' Parameter vulnerability discovered by Chi Trung Huynh - Duy Tan Universiy in WordPress Plugin AI Engine versions = 3.7.7...

CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - 通过 restupload 进行未经验证的任意文件上传 描述: WordPress 的 AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! 插件在 'restupload' 函数中缺少文件类型验证，因此在所有版本（包括 1.9.98 及更早版本）中容易受到任意文件上传漏洞的影响。这使得未经身份验证的攻击者能够在受影响站点的服务器上上传任意文件，从而可能导致远程代码执行。 root@kitploit: Severit...

WordPress AI Engine plugin < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription vulnerability

Subscriber+ Arbitrary File Read via Audio Transcription vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.6...

WordPress AI Engine plugin < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability

Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.4...

WordPress AI Engine plugin < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie vulnerability

Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie vulnerability discovered by Revanth Hari Narayana Matte in WordPress Plugin AI Engine versions 3.6.4...

CVE-2026-75798

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the site owner's...

CVE-2026-75797

The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...

CVE-2026-75798 AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the site owner's...

CVE-2026-75798

CVE-2026-75798 affects the AI Engine WordPress plugin in versions 3.4.0 through 3.7.1 . The vulnerability is a missing authorisation check in the Editor Assistant feature, which is intended to be administration-only. Instead of verifying the user's role, the plugin relies on a token it distribute...

EUVD-2026-66282

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the site owner's...