SEGURIDAD DE PLUGINS
Vulnerabilidades conocidas, compatibilidad con PHP y alternativas más seguras para el plugin de WordPress Ai Engine — verificado contra la base de datos de seguridad local de WP Clinic.
ai-engineAIchatbotClaudegptopenai
26 CVEs conocidos registrados para Ai Engine.
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2026-12510 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5 | Elusión de autorización mediante una clave controlada por el usuario | Desconocido | < 3.5.5 | 3.5.5 | 2026-07-16 | ✓ corregido en la última versión |
| CVE-2026-12511 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5 | Limitación incorrecta de una ruta a un directorio restringido (Path Traversal) | Desconocido | < 3.5.5 | 3.5.5 | 2026-07-14 | ✓ corregido en la última versión |
| CVE-2026-27407 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.0 | Asignación incorrecta de privilegios | Alta 7,2 | < 3.5.0 | 3.5.0 | 2026-05-28 | ✓ corregido en la última versión |
| CVE-2026-8719 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.0 | Gestión incorrecta de privilegios | Alta 8,8 | < 3.5.0 | 3.5.0 | 2026-05-16 | ✓ corregido en la última versión |
| CVE-2026-23802 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.3.3 | Carga de archivos sin restricción de tipo peligroso | Crítica 9,1 | < 3.3.3 | 3.3.3 | 2026-02-25 | ✓ corregido en la última versión |
| CVE-2025-12844 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.1.9 | Deserialización de datos no confiables | Alta 7,1 | < 3.1.9 | 3.1.9 | 2025-11-12 | ✓ corregido en la última versión |
| CVE-2025-11749 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.1.4 | Exposición de información sensible a un actor no autorizado | Crítica 9,8 | < 3.1.4 | 3.1.4 | 2025-11-04 | ✓ corregido en la última versión |
| CVE-2024-10499 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.6.5 | Neutralización incorrecta de elementos especiales en un comando SQL (inyección SQL) | Alta 7,2 | < 2.6.5 | 2.6.5 | 2024-11-21 | ✓ corregido en la última versión |
The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a client-supplied identifier, allowing users with subscriber-level access to read other users' private conversations and take over their conversation records when the discussions feature is enabled.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a downloaded file, allowing authenticated users with editor-level access to write attacker-controlled bytes to an arbitrary location on the server via path traversal.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.4.9. This makes it possible for authenticated attackers, with Editor-level access and above, to elevate their privileges.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9. This is due to missing WordPress capability enforcement in the MCP OAuth bearer-token authorization path, where any valid OAuth token causes MCP access to be granted without verifying administrator privileges. This makes it possible for authenticated (Subscriber+) attackers to invoke admin-level MCP tools and escalate privileges to Administrator.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.3.2. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to PHP Object Injection via PHAR Deserialization in all versions up to, and including, 3.1.8 via deserialization of untrusted input in the 'rest_simpleTranscribeAudio' and 'rest_simpleVisionQuery' functions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine plugin for WordPress is vulnerable to SQL Injection via the 'value' parameter in all versions up to, and including, 2.6.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
| CVE | Vulnerabilidad | Tipo | Gravedad | Afectadas | Corregido en | Publicado | Estado |
|---|---|---|---|---|---|---|---|
| CVE-2024-6723 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.4.8 | Neutralización incorrecta de elementos especiales en un comando SQL (inyección SQL) | Media 4,7 | < 2.4.8 | 2.4.8 | 2024-08-22 | ✓ corregido en la última versión |
| CVE-2024-6451 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.5.1 | Control incorrecto de la generación de código (inyección de código) | Alta 7,2 | < 2.5.1 | 2.5.1 | 2024-07-29 | ✓ corregido en la última versión |
| CVE-2024-38791 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.4.8 | Falsificación de petición del lado del servidor (SSRF) | Alta 7,1 | < 2.4.8 | 2.4.8 | 2024-07-22 | ✓ corregido en la última versión |
| CVE-2024-34440 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.2.70 | Carga de archivos sin restricción de tipo peligroso | Alta 7,2 | < 2.2.70 | 2.2.70 | 2024-05-07 | ✓ corregido en la última versión |
| CVE-2024-29100 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 | Carga de archivos sin restricción de tipo peligroso | Crítica 9,1 | < 2.1.5 | 2.1.5 | 2024-03-28 | ✓ corregido en la última versión |
| CVE-2024-29090 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 | Falsificación de petición del lado del servidor (SSRF) | Media 6,8 | < 2.1.5 | 2.1.5 | 2024-03-26 | ✓ corregido en la última versión |
| CVE-2024-0378 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.2.1 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 6,1 | < 2.2.1 | 2.2.1 | 2024-03-01 | ✓ corregido en la última versión |
| CVE-2024-0699 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 | Carga de archivos sin restricción de tipo peligroso | Alta 7,2 | < 2.1.5 | 2.1.5 | 2024-02-05 | ✓ corregido en la última versión |
| — | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 | — | Desconocido | < 2.1.5 | 2.1.5 | 2024-01-18 | ✓ corregido en la última versión |
| CVE-2023-51409 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.9.99 | Carga de archivos sin restricción de tipo peligroso | Crítica 10,0 | < 1.9.99 | 1.9.99 | 2024-01-09 | ✓ corregido en la última versión |
| CVE-2023-4253 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 4.7.8 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 4.7.8 | 4.7.8 | 2023-08-10 | ⚠ necesita actualización |
| CVE-2023-2580 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.6.83 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 4,8 | < 1.6.83 | 1.6.83 | 2023-06-27 | ✓ corregido en la última versión |
| — | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.6.83 | — | Desconocido | < 1.6.83 | 1.6.83 | 2023-05-19 | ✓ corregido en la última versión |
| — | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.6.83 | — | Desconocido | < 1.6.83 | 1.6.83 | 2023-05-19 | ✓ corregido en la última versión |
| CVE-2025-5071 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] >= 2.8.0 - < 2.8.4 | Autorización incorrecta | Alta 8,8 | 2.8.0–2.8.4 | 2.8.4 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-6238 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.8.5 | Redirección de URL a un sitio no confiable (Open Redirect) | Alta 8,0 | < 2.8.5 | 2.8.5 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-5570 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.8.5 | Neutralización incorrecta de la entrada al generar la página web (Cross-site Scripting / XSS) | Media 5,4 | < 2.8.5 | 2.8.5 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-7780 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.9.5 | Exposición de información sensible a un actor no autorizado | Media 6,5 | < 2.9.5 | 2.9.5 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2025-7847 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] >= 2.9.3 - < 2.9.5 | Carga de archivos sin restricción de tipo peligroso | Alta 8,8 | 2.9.3–2.9.5 | 2.9.5 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2026-1400 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.3.3 | — | Desconocido | < 3.3.3 | 3.3.3 | 0000-00-00 | ✓ corregido en la última versión |
| CVE-2026-0746 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.3.3 | — | Desconocido | < 3.3.3 | 3.3.3 | 0000-00-00 | ✓ corregido en la última versión |
| — | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.9.6 | — | Media 6,5 | < 2.9.6 | 2.9.6 | 0000-00-00 | ✓ corregido en la última versión |
| — | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.1.9 | — | Desconocido | < 3.1.9 | 3.1.9 | 0000-00-00 | ✓ corregido en la última versión |
The AI Engine plugin for WordPress is vulnerable to SQL Injection via the sort[accessor] parameter in all versions up to, and including, 2.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.5.0 via the /wp-json/mwai/v1/settings/update REST API endpoint. This is due to the plugin not properly validating a log path file extension allowing a user to set the log extension as .php making the file executable. This makes it possible for authenticated attackers, with administrator-level access and above, to execute code on the server.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.4.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used to query and modify information from internal services.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.2.63. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 2.1.5). Rafie Muhammad (Patchstack) discovered and reported this Arbitrary File Upload vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 2.1.5. This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 2.1.5). Rafie Muhammad (Patchstack) discovered and reported this Server Side Request Forgery (SSRF) vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to cause a website to execute website requests to an arbitrary domain of the attacker. This could allow a malicious actor to find sensitive information of other services running on the system. This vulnerability has been fixed in version 2.1.5. This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 2.2.1). rootxsudip discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 2.2.1. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 2.1.5). rootxsudip discovered and reported this Arbitrary File Upload vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 2.1.5. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_image_from_url' function in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Editor access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2024-29100 is likely a duplicate of this issue.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 1.9.99). Rafie Muhammad (Patchstack) discovered and reported this Arbitrary File Upload vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 1.9.99. Have additional information or questions about this entry? Get in touch.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 4.7.8). Nguyen Hoang Nam discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 4.7.8.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings in versions up to, and including, 1.6.82 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
Update the WordPress AI Engine: ChatGPT Chatbot plugin to the latest available version (at least 1.6.83). WPScanTeam discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress AI Engine: ChatGPT Chatbot Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.6.83.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Patchstack
The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Meow_MWAI_Labs_MCP::can_access_mcp' function in versions 2.8.0 to 2.8.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to have full access to the MCP and run various commands like 'wp_create_user', 'wp_update_user' and 'wp_update_option', which can be used for privilege escalation, and 'wp_update_post', 'wp_delete_post', 'wp_update_comment' and 'wp_delete_comment', which can be used to edit and delete posts and comments.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the 'redirect_uri' parameter is missing validation during the authorization flow. This makes it possible for unauthenticated attackers to intercept the authorization code and obtain an access token by redirecting the user to an attacker-controlled URI. Note: OAuth is disabled, the 'Meow_MWAI_Labs_OAuth' class is not loaded in the plugin in the patched version 2.8.5.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling get_audio(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to read any file on the web server and exfiltrate it via the plugin’s OpenAI API integration.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_simpleFileUpload() function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server when the REST API is enabled, which may make remote code execution possible.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine – The Chatbot and AI Framework for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the `rest_helpers_update_media_metadata` function in all versions up to, and including, 3.3.2. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The attacker can upload a benign image file, then use the `update_media_metadata` endpoint to rename it to a PHP file, creating an executable PHP file in the uploads directory.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get_audio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services, if "Public API" is enabled in the plugin settings, and 'allow_url_fopen' is set to 'On' on the server.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: Wordfence
The AI Engine plugin for WordPress is vulnerable to unauthorized access and loss of data due to a missing capability check on the rest_list and delete_files functions in all versions up to, and including, 2.9.5. This makes it possible for unauthenticated attackers to list and delete files uploaded by other users.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.8 via the rest_helpers_create_images function. This makes it possible for authenticated attackers, with Editor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. On Cloud instances, this issue allows for metadata retrieving.
Descripción técnica mostrada en el idioma original de la fuente (inglés).
Fuente: CVE.org
Mantén Ai Engine actualizado — 3.6.2 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").
Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.
Ejecuta un escaneo pasivo gratis ahora, o crea una cuenta gratuita e instala el plugin de WP Clinic para un escaneo profundo de toda tu cuenta de hosting y reparación asistida por IA.