| CVE-2026-110982 |
The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object…
|
4.9
Medium
|
Oct 21, 2026 |
| CVE-2026-110976 |
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs…
|
4.9
Medium
|
Oct 18, 2026 |
| CVE-2026-111041 |
The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management…
|
4.9
Medium
|
Oct 18, 2026 |
| CVE-2026-75798 |
The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only…
|
5.3
Medium
|
Aug 26, 2026 |
| CVE-2026-75797 |
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local…
|
7.7
High
|
Aug 26, 2026 |
| CVE-2026-75796 |
The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the…
|
7.2
High
|
Aug 21, 2026 |
| CVE-2026-16953 |
The AI Engine WordPress plugin before 3.6.4 does not verify ownership of a guest's uploaded chatbot files before…
|
4.8
Medium
|
Aug 8, 2026 |
| CVE-2026-16955 |
The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and…
|
5.0
Medium
|
Aug 8, 2026 |
| CVE-2026-16954 |
The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an…
|
6.5
Medium
|
Aug 6, 2026 |
| CVE-2026-12510 |
The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a…
|
5.9
Medium
|
Jul 16, 2026 |
| CVE-2026-12511 |
The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a…
|
8.1
High
|
Jul 14, 2026 |
| CVE-2024-10499 |
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint…
|
7.2
High
|
Dec 12, 2024 |
| CVE-2024-6723 |
The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL…
|
4.7
Medium
|
Sep 13, 2024 |
| CVE-2024-6451 |
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning
|
7.2
High
|
Aug 19, 2024 |