The AI Engine plugin for WordPress is at risk of being hacked through a vulnerability called SQL Injection. This is because it does not properly protect the ‘value’ parameter, which is a piece of information given by the user, and the existing SQL query is not prepared enough. This means that someone who has been authorized as an Administrator or above can add extra SQL queries to ones that already exist, and use them to get private information from the database.