Really Simple Security logo

Log out
Get PRO

Latest

Output validation vulnerability in AI Engine 3.1.8

  • Severity: high-risk
  • Status: Fixed
  • Publication: November 12, 2025

The AI Engine plugin for WordPress has a security vulnerability that allows attackers to inject malicious code. This can only happen if the attacker has a certain level of access and if another plugin or theme with a specific type of code is also installed on the website. This could potentially lead to the attacker being able to delete files, access sensitive information, or even execute their own code.

Detected in:

AI Engine – The Chatbot and AI Framework for WordPress fixed vulnerable versions:
AI Engine – The Chatbot, AI Framework & MCP for WordPress fixed vulnerable versions:
AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable fixed vulnerable versions: >= * <= 3.1.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.