WordPress ai-engine has 9 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2024-0699 | The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing | medium | 6.6 | <=2.1.4 | – |
| CVE-2024-6451 | AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to vali | high | 7.2 | <2.4.3 | 2.4.3 |
| CVE-2025-5071 | The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on | high | 8.8 | >=2.8.0 and <2.8.4 | 2.8.4 |
| CVE-2024-10499 | The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a | high | 7.2 | <2.6.5 | 2.6.5 |
| CVE-2024-0378 | The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the A | medium | 6.5 | <2.2.1 | 2.2.1 |
| CVE-2023-2580 | The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege users such | medium | 4.8 | <1.6.83 | 1.6.83 |
| CVE-2024-6723 | The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to | medium | 4.7 | <2.4.8 | 2.4.8 |
| CVE-2025-6238 | The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the | high | 8.0 | =2.8.4 | – |
| CVE-2025-5570 | The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all version | medium | 5.4 | <2.8.5 | 2.8.5 |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked