CVE
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-12511 | AI Engine – The Chatbot, AI Framework & MCP for WordPress [ai-engine] < 3.5.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Unknown | < 3.5.5 | 3.5.5 | 2026-07-14 | — |
The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a downloaded file, allowing authenticated users with editor-level access to write attacker-controlled bytes to an arbitrary location on the server via path traversal.
Source: CVE.org
No signup, no credit card — enter your URL and get a security report in seconds.