AI Engine CVE-2023-51409
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
DescriptionNVD
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
AnalysisAI
Unrestricted file upload in Jordy Meow's AI Engine: ChatGPT Chatbot plugin for WordPress (versions up to and including 1.9.98) allows remote attackers to upload arbitrary files of dangerous types, including executable PHP scripts, leading to remote code execution on the underlying web server. With a maximum CVSS score of 10.0, an EPSS score of 92.78% (100th percentile), and publicly available exploit code, this represents an extreme-priority issue for any WordPress site running the plugin.
Technical ContextAI
The affected component is the AI Engine WordPress plugin (CPE cpe:2.3:a:meowapps:ai_engine:*:*:*:*:*:wordpress:*:*), developed by Jordy Meow (MeowApps), which integrates ChatGPT-style chatbot functionality into WordPress sites. The root cause is CWE-434 (Unrestricted Upload of File with Dangerous Type), meaning the plugin's upload handler fails to adequately validate the file type, extension, or MIME type of submitted files before placing them in a web-accessible location. In WordPress plugin contexts, this class of flaw typically allows attackers to drop PHP webshells into wp-content directories that are subsequently executable via direct HTTP request, transforming a file write primitive into full code execution.
RemediationAI
No vendor-released patched version is independently confirmed in the available intelligence, so administrators should consult the Patchstack advisory (audit@patchstack.com source) and the plugin's WordPress.org page to identify and immediately upgrade to the first release after 1.9.98 that addresses the issue; until that version is verified and installed, deactivate and remove the AI Engine plugin entirely (the safest control, at the cost of losing chatbot functionality), or restrict access to the plugin's REST/AJAX upload endpoints via a WAF rule or web-server access control to authenticated administrators only (which may break legitimate chatbot interactions for end users). At minimum, monitor wp-content/uploads/ and any plugin-specific upload directories for newly written .php, .phtml, or other executable files and audit existing files for webshells, since the public POC makes opportunistic exploitation likely.
Share
External POC / Exploit Code
Leaving vuln.today