Advisories · Technology
AI Engine.
Every CVE that names AI Engine among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.9 Medium
AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt
- AI Engine
- Broken access control
- CVSS 4.9 Medium
AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media
- AI Engine
- Broken access control
- CVSS 4.9 Medium
AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media
- AI Engine
- Broken access control
- CVSS 5.3 Medium
AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant
- AI Engine
- Broken access control
- CVSS 7.7 High
AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter
- AI Engine
- Path traversal
- CVSS 7.2 High
AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools
- AI Engine
- Privilege escalation
- CVSS 5.0 Medium
AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription
- AI Engine
- Path traversal
- CVSS 4.8 Medium
AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie
- AI Engine
- Broken access control
- CVSS 6.5 Medium
AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens
- AI Engine
- Information disclosure
- CVSS 5.9 Medium
AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR
- AI Engine
- Broken access control
- CVSS 8.1 High
AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal
- AI Engine
- CVSS 7.2 High
AI-Engine < 2.6.5 - Admin+ SQLi
- AI Engine
- CVSS 4.7 Medium
AI Engine < 2.4.8 - Admin+ SQLi
- AI Engine
- CVSS 7.2 High
AI Engine < 2.5.1 - Admin+ RCE
- AI Engine