CVE · Critical
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-23802 | AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini [ai-engine] < 3.3.3 | Unrestricted Upload of File with Dangerous Type | Critical 9.1 | < 3.3.3 | 3.3.3 | 2026-02-25 | — |
The AI Engine plugin for WordPress has a security flaw that allows authorized users with elevated permissions to upload any type of file without restrictions. This vulnerability affects all versions up to 3.3.2 and could potentially enable malicious code execution on the affected site.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.