CVE Database /
CVE-2024-29100
CVE · Critical
CVE-2024-29100 — AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-29100
|
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.1.5 |
Unrestricted Upload of File with Dangerous Type |
Critical
9.1
|
< 2.1.5
|
2.1.5 |
2024-03-28 |
—
|
CVE-2024-29100
The AI Engine plugin for WordPress versions prior to 2.1.5 contains an arbitrary file upload vulnerability that permits attackers to upload malicious files to a website, potentially including executable backdoors that could grant unauthorized access to the system. Researcher Rafie Muhammad identified and disclosed this flaw through Patchstack. The issue has been resolved in version 2.1.5 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings