What is the CVSS score of CVE-2023-51409?

CVE-2023-51409 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 92.8%.

Which versions of AI Engine are affected by CVE-2023-51409?

The ChatGPT Chatbot plugin for WordPress (versions through 1.9.98) contains a critical file upload vulnerability enabling remote code execution on affected web servers.

Is there a public PoC exploit available for CVE-2023-51409?

Yes, a public proof-of-concept exploit is available for CVE-2023-51409. Prioritise patching immediately. EPSS: 92.8%.

How to fix or mitigate CVE-2023-51409?

24 hours: Immediately disable and remove the ChatGPT Chatbot plugin from all WordPress installations; audit web server logs and file systems for evidence of exploitation. 7 days: Restore affected systems from verified clean backups; evaluate alternative chatbot solutions for WordPress. 30 days: Monitor Jordy Meow plugin repository for security updates; if a patched version is released (recommend 1.9.99 or later), review and test thoroughly before deployment.

AI Engine CVE-2023-51409

CRITICAL

Unrestricted Upload of File with Dangerous Type (CWE-434)

2024-04-12 audit@patchstack.com

File Upload Ai Engine

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

DescriptionCVE.org

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.

AnalysisAI

Unrestricted file upload in Jordy Meow's AI Engine: ChatGPT Chatbot plugin for WordPress (versions up to and including 1.9.98) allows remote attackers to upload arbitrary files of dangerous types, including executable PHP scripts, leading to remote code execution on the underlying web server. With a maximum CVSS score of 10.0, an EPSS score of 92.78% (100th percentile), and publicly available exploit code, this represents an extreme-priority issue for any WordPress site running the plugin.

Technical ContextAI

The affected component is the AI Engine WordPress plugin (CPE cpe:2.3:a:meowapps:ai_engine:*:*:*:*:*:wordpress:*:*), developed by Jordy Meow (MeowApps), which integrates ChatGPT-style chatbot functionality into WordPress sites. The root cause is CWE-434 (Unrestricted Upload of File with Dangerous Type), meaning the plugin's upload handler fails to adequately validate the file type, extension, or MIME type of submitted files before placing them in a web-accessible location. In WordPress plugin contexts, this class of flaw typically allows attackers to drop PHP webshells into wp-content directories that are subsequently executable via direct HTTP request, transforming a file write primitive into full code execution.

RemediationAI

No vendor-released patched version is independently confirmed in the available intelligence, so administrators should consult the Patchstack advisory (audit@patchstack.com source) and the plugin's WordPress.org page to identify and immediately upgrade to the first release after 1.9.98 that addresses the issue; until that version is verified and installed, deactivate and remove the AI Engine plugin entirely (the safest control, at the cost of losing chatbot functionality), or restrict access to the plugin's REST/AJAX upload endpoints via a WAF rule or web-server access control to authenticated administrators only (which may break legitimate chatbot interactions for end users). At minimum, monitor wp-content/uploads/ and any plugin-specific upload directories for newly written .php, .phtml, or other executable files and audit existing files for webshells, since the public POC makes opportunistic exploitation likely.