Skip to content
Sign in
4.7 Medium

CVE-2024-6723 The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL…

Description

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.

Affected products and versions

Product Affected versions Fixed in
AI Engine 2.4 earliest → < 2.4.8 2.4.8
ai_engine 2.4 earliest → < 2.4.8 2.4.8

Other CVEs of AI Engine

The 14 CVEs of AI Engine →
CVE-2026-110982 The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object… 4.9 Medium CVE-2026-111041 The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management… 4.9 Medium CVE-2026-110976 The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs… 4.9 Medium CVE-2026-75798 The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only… 5.3 Medium
Track this CVE