340 matches found
CVE-2025-11749
CVE-2025-11749 AI Engine = 3.1.3 - Exposición de información sensible no autenticada que conduce a escalada de privilegios ⚠️ AI Engine = 3.1.3 — Exposición de información sensible no autenticada → Escalada de privilegios GitHub: Nxploited Telegram: @KNxploited AVISO IMPORTANTE: Muchas personas...
Jordy Meow AI Engine - Unrestricted File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine- ChatGPT Chatbot.This issue affects AI Engine- ChatGPT Chatbot- from n/a through 1.9.98. id: CVE-2023-51409 info: name: Jordy Meow AI Engine - Unrestricted File Upload author: pussycat0x severity: critical...
WordPress AI Engine Plugin - Token Exposure
Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...
CVE-2025-7847-POC
CVE-2025-7847 Plugin de WordPress – Carga Arbitraria de Archivos por Suscriptor Autenticado – POC Plugin de WordPress AI Engine 2.9.3 - 2.9.4 Prueba de Concepto Tenga en cuenta que esta vulnerabilidad solo puede explotarse si la opción “Public API” está habilitada, que está deshabilitada por...
CVE-2023-51409
CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Carga Arbitraria de Archivos No Autenticada a través de restupload Descripción: El plugin AI Engine: Chatbots, Generadores, Asistentes, GPT 4 y más! para WordPress es vulnerable a cargas arbitrarias de archivos debido a la falta de validación d...
0-click-RCE-Exploit-for-CVE-2023-51409
CVE-2023-51409 / Exploit RCE de 0-Click Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 Este repositorio contiene un exploit de prueba de concepto para CVE-2023-51409, una vulnerabilidad de carga arbitraria de archivos sin autenticación en el plugin AI Engine: ChatG...
WordPress AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by whale120 in WordPress Plugin AI Engine versions = 3.8.0...
CVE-2025-13380
AI Engine para WordPress: ChatGPT, GPT Content Generator = 1.0.1 - Lectura arbitraria de archivos autenticada Contribuidor+ El plugin AI Engine para WordPress contiene una vulnerabilidad en su función de inserción de imágenes que permite que cualquier usuario autenticado con capacidades de edició...
CVE-2026-96561
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...
CVE-2026-96561
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.8.0 . The vulnerability stems from a chain of missing input neutralization and output escaping starting at the /mwai-ui/v1/chats/submit REST en...
CVE-2026-96561 AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injection
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...
EUVD-2026-90465
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...
CVE-2026-96561 AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injection
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the...
CVE-2026-93623
Unauthenticated Insecure Direct Object References IDOR in AI Engine = 3.7.8 versions...
EUVD-2026-85465
Unauthenticated Insecure Direct Object References IDOR in AI Engine = 3.7.8 versions...
CVE-2026-93623
The AI Engine WordPress plugin versions
CVE-2026-93623 WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References IDOR in AI Engine = 3.7.8 versions...
WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by foehn in WordPress Plugin AI Engine versions = 3.7.8...
