agentprime: tigroumeow-ai-engine-the-chatbot-ai-framework-mcp-for-wordpressEvery new CVE for tigroumeow-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress.https://agentprime.io/CVE-2026-96561: AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injectionhttps://agentprime.io/advisories/CVE-2026-96561/https://agentprime.io/advisories/CVE-2026-96561/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 03:28:22 GMTCVECVE-2026-89141: AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameterhttps://agentprime.io/advisories/CVE-2026-89141/https://agentprime.io/advisories/CVE-2026-89141/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 06:07:31 GMTCVECVE-2026-15988: AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Matchhttps://agentprime.io/advisories/CVE-2026-15988/https://agentprime.io/advisories/CVE-2026-15988/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 06:48:48 GMTCVECVE-2026-8719: AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Tokenhttps://agentprime.io/advisories/CVE-2026-8719/https://agentprime.io/advisories/CVE-2026-8719/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 02:27:02 GMTCVECVE-2026-1400: AI Engine <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpointhttps://agentprime.io/advisories/CVE-2026-1400/https://agentprime.io/advisories/CVE-2026-1400/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jan 2026 08:26:56 GMTCVECVE-2026-0746: AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgeryhttps://agentprime.io/advisories/CVE-2026-0746/https://agentprime.io/advisories/CVE-2026-0746/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 18:27:55 GMTCVECVE-2025-8084: AI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgeryhttps://agentprime.io/advisories/CVE-2025-8084/https://agentprime.io/advisories/CVE-2025-8084/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 12:29:48 GMTCVECVE-2025-12844: AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserializationhttps://agentprime.io/advisories/CVE-2025-12844/https://agentprime.io/advisories/CVE-2025-12844/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Nov 2025 07:27:53 GMTCVECVE-2025-11749: AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-11749/https://agentprime.io/advisories/CVE-2025-11749/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.75 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 05:31:25 GMTCVEcriticalCVE-2025-8268: Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletionhttps://agentprime.io/advisories/CVE-2025-8268/https://agentprime.io/advisories/CVE-2025-8268/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 03 Sep 2025 20:24:15 GMTCVECVE-2025-7780: AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functionshttps://agentprime.io/advisories/CVE-2025-7780/https://agentprime.io/advisories/CVE-2025-7780/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Jul 2025 09:22:16 GMTCVECVE-2025-5570: AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameterhttps://agentprime.io/advisories/CVE-2025-5570/https://agentprime.io/advisories/CVE-2025-5570/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 01:43:47 GMTCVECVE-2024-0378: AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-0378/https://agentprime.io/advisories/CVE-2024-0378/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 02 Mar 2024 09:37:32 GMTCVECVE-2024-0699: AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_urlhttps://agentprime.io/advisories/CVE-2024-0699/https://agentprime.io/advisories/CVE-2024-0699/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:21:32 GMTCVE