Now officially on WordPress.org

CVE Database / CVE-2023-51409

CVE · Critical

CVE-2023-51409 — AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.9.99

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-51409 AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 1.9.99 Unrestricted Upload of File with Dangerous Type Critical 10.0 < 1.9.99 1.9.99 2024-01-09 —

CVE-2023-51409

The AI Engine plugin for WordPress versions prior to 1.9.99 contain an arbitrary file upload vulnerability that permits attackers to upload files of any kind to affected websites. An attacker could exploit this flaw to introduce malicious files such as backdoors, which could then be executed to establish unauthorized access to the site. This security issue has been resolved in version 1.9.99 and later.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings