The AI Engine plugin for WordPress has a security issue that could allow attackers to run their own code on a website using the plugin. This vulnerability exists in all versions of the plugin up to version 2.5.0 and can be exploited through a specific REST API endpoint. The problem is caused by the plugin not checking the file extension of a log path, which would normally prevent executable files from being uploaded. This means that an attacker with administrator-level access could potentially run malicious code on the website.