CVE Database /
CVE-2024-38791
CVE · High
CVE-2024-38791 — AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.4.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-38791
|
AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 2.4.8 |
Server-Side Request Forgery (SSRF) |
High
7.1
|
< 2.4.8
|
2.4.8 |
2024-07-22 |
—
|
CVE-2024-38791
The AI Engine plugin for WordPress contains a server-side request forgery vulnerability affecting versions 2.4.7 and earlier. Authenticated users with subscriber-level permissions or higher can exploit this flaw to initiate web requests to any destination from the affected server, potentially allowing them to access or alter data on internal services. The vulnerability was resolved in version 2.4.8.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings