CVE Database /
CVE-2024-29090
CVE · Medium
CVE-2024-29090 — AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini [ai-engine] < 2.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-29090
|
AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini [ai-engine] < 2.1.5 |
Server-Side Request Forgery (SSRF) |
Medium
6.8
|
< 2.1.5
|
2.1.5 |
2024-03-26 |
—
|
CVE-2024-29090
The AI Engine plugin for WordPress versions prior to 2.1.5 contains a server-side request forgery vulnerability that could permit an attacker to manipulate the website into making requests to arbitrary domains under their control. By exploiting this flaw, a malicious actor could potentially access sensitive information from other services operating on the same system. The vulnerability was discovered by Rafie Muhammad and has been resolved in version 2.1.5 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings