| CVE-2026-110982 |
The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object…
|
4.9
Moyenne
|
21 oct. 2026 |
| CVE-2026-110976 |
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs…
|
4.9
Moyenne
|
18 oct. 2026 |
| CVE-2026-111041 |
The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management…
|
4.9
Moyenne
|
18 oct. 2026 |
| CVE-2026-75798 |
The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only…
|
5.3
Moyenne
|
26 août 2026 |
| CVE-2026-75797 |
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local…
|
7.7
Élevée
|
26 août 2026 |
| CVE-2026-75796 |
The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the…
|
7.2
Élevée
|
21 août 2026 |
| CVE-2026-16953 |
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before…
|
4.8
Moyenne
|
8 août 2026 |
| CVE-2026-16955 |
The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and…
|
5.0
Moyenne
|
8 août 2026 |
| CVE-2026-16954 |
The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an…
|
6.5
Moyenne
|
6 août 2026 |
| CVE-2026-12510 |
The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a…
|
5.9
Moyenne
|
16 juil. 2026 |
| CVE-2026-12511 |
The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a…
|
8.1
Élevée
|
14 juil. 2026 |
| CVE-2024-10499 |
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint…
|
7.2
Élevée
|
12 déc. 2024 |
| CVE-2024-6723 |
The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL…
|
4.7
Moyenne
|
13 sept. 2024 |
| CVE-2024-6451 |
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning
|
7.2
Élevée
|
19 août 2024 |