EUVD-2026-43626
GHSA-jp8h-m8g9-6fvr
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Network-reachable endpoint (AV:N) with low complexity (AC:L) needs an editor account (PR:L) and no interaction; arbitrary file write yields high confidentiality/integrity impact, availability not directly affected.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The AI Engine WordPress plugin before 3.5.5 does not sanitize a user-supplied filename before using it to write a downloaded file, allowing authenticated users with editor-level access to write attacker-controlled bytes to an arbitrary location on the server via path traversal.
AnalysisAI
Arbitrary file write in the AI Engine WordPress plugin before 3.5.5 lets authenticated editor-level users abuse an unsanitized, user-supplied filename during a file-download-and-save operation to plant attacker-controlled bytes anywhere the web server user can write via path traversal. Because writing a PHP payload into the webroot typically yields remote code execution, this crosses from a content-management flaw into full site compromise. Publicly available exploit code exists and a vendor patch has shipped, though the issue is not listed in CISA KEV.
Technical ContextAI
AI Engine is a popular WordPress AI-assistant plugin (chatbot, content and image generation) that fetches remote resources and persists them to disk. The root cause is a classic path-traversal / improper limitation of a pathname (CWE-22 class; the input feed lists CWE as N/A) where a user-controlled filename is concatenated into a write path without normalizing or stripping '../' sequences, so the destination escapes the intended upload/cache directory. The affected component is the download-to-file routine reachable through the plugin's authenticated endpoints; the CPE cpe:2.3:a:unknown:ai_engine:*:*:*:*:*:*:*:* identifies the product but leaves the vendor field unresolved, mapping in practice to the WordPress.org 'ai-engine' plugin slug.
RemediationAI
Upgrade the AI Engine plugin to version 3.5.5 or later, which is the vendor-released fix (Patch available per vendor advisory; fixed at the 3.5.5 boundary per EUVD). Review the WPScan advisory at https://wpscan.com/vulnerability/cf3cf59e-da36-429b-8794-5a46587e8462/ for specifics. If immediate patching is not possible, restrict and audit editor-level accounts and enforce strong MFA-backed authentication to shrink the pool of principals who can reach the vulnerable endpoint; temporarily deactivate the AI Engine plugin if its download/save features are unused (side effect: loss of AI-assist functionality); and apply filesystem hardening so the web server user cannot write to PHP-executable directories, for example marking wp-content/uploads non-executable via server configuration, which blunts the write-to-RCE path at the cost of breaking any legitimate dynamic file handling. Monitor for unexpected files appearing outside upload directories as a detection control.
Unrestricted file upload in Jordy Meow's AI Engine: ChatGPT Chatbot plugin for WordPress (versions up to and including 1
Path traversal in the AI Engine WordPress plugin (versions 3.3.3 through 3.7.1) allows arbitrary server file reads with
Privilege escalation in the AI Engine WordPress plugin (versions 2.8.0 through 3.6.0) enables any sub-site Administrator
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint b
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. Rated high severity (CVSS 7.2), this
Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated medium severity (CV
Cleartext exposure of third-party API keys and authentication tokens in AI Engine WordPress plugin (before 3.6.4) allows
Unauthorized access to private chatbot conversations in the AI Engine WordPress plugin before 3.5.5 allows any authentic
Unauthenticated remote attackers can invoke AI queries against a site owner's configured provider account through the AI
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.2.63. Rated criti
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated critic
Path traversal in the AI Engine WordPress plugin before 3.6.6 allows server-side file contents to be read and exfiltrate
Same technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today