AI Engine CVE-2023-51409

No special conditions - remote unauthenticated exploitation against default configurations of the AI Engine WordPress plugin at versions up to and including 1.9.98, consistent with CVSS AV:N/AC:L/PR:N/UI:N. The only limiting factors are that the target must have the AI Engine plugin installed and activated, must be running version 1.9.98 or earlier, and the plugin's upload endpoint must be reachable from the attacker's network position (i.e., not blocked by an upstream WAF or IP allowlist); no authentication, no user interaction, and no non-default configuration are required.

All signals converge on critical, immediate priority. The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H indicates network-reachable exploitation with low complexity, no privileges, no user interaction, and scope change with full impact on confidentiality, integrity, and availability - the worst-case profile. The EPSS score of 92.78% (100th percentile) indicates this is among the most likely CVEs to be exploited in the wild over the next 30 days, and publicly available exploit code lowers the barrier for opportunistic attackers and botnets that mass-scan WordPress installations. CISA KEV status is not indicated in the provided data, so confirmed active exploitation is not asserted, but the combination of trivial exploitability, public POC, and a widely deployed WordPress plugin makes targeted-versus-widespread distinctions moot - defenders should treat this as actively scanned-for. No conflicts exist between signals; the only gap is the absence of a confirmed fix version in the supplied intelligence.

An unauthenticated remote attacker identifies a WordPress site running AI Engine ≤ 1.9.98 via fingerprinting or mass-scan, then sends a crafted HTTP upload request to the plugin's vulnerable endpoint containing a PHP webshell disguised or simply named with a dangerous extension. Because the plugin does not restrict the file type, the shell lands in a web-accessible directory and the attacker requests its URL to execute arbitrary commands as the web server user, achieving full site compromise. Publicly available exploit code makes this scenario reproducible without bespoke development.