CVE Database /
CVE-2024-0699
CVE · High
CVE-2024-0699 — AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-0699
|
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 |
Unrestricted Upload of File with Dangerous Type |
High
7.2
|
< 2.1.5
|
2.1.5 |
2024-01-18 |
—
|
CVE-2024-0699
The AI Engine plugin for WordPress contains an arbitrary file upload vulnerability that could enable attackers to upload malicious files of any type to affected websites, potentially including backdoors that could be executed to compromise the site further. This flaw was identified by rootxsudip and impacts all versions before 2.1.5. Site administrators should upgrade to version 2.1.5 or later to remediate the vulnerability.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings