CVE-2025-5570

< 2.8.5

The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in a

5.4MEDIUM

CVE-2025-6238

all versions

The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementatio

8.0HIGH

CVE-2025-5071

>= 2.8.0 and < 2.8.4

The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability

8.8HIGH

CVE-2024-10499

< 2.6.5

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before usin

7.2HIGH

CVE-2024-6723

< 2.4.8

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement,

4.7MEDIUM

CVE-2024-6451

< 2.4.3

AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fai

7.2HIGH

CVE-2024-38791

< 2.4.8

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This

4.9MEDIUM

CVE-2024-34440

< 2.2.70

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engin

9.1CRITICAL

CVE-2023-51409

< 1.9.99

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engin

10.0CRITICAL

CVE-2024-29100

< 2.1.5

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engin

9.1CRITICAL

CVE-2024-29090

< 2.1.5

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Ch

6.8MEDIUM

CVE-2024-0378

< 2.2.1

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting

6.5MEDIUM

CVE-2024-0699

<= 2.1.4

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due

6.6MEDIUM

CVE-2023-2580

< 1.6.83

The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege u

4.8MEDIUM