High severity · published Jul 4, 2025
CVE-2025-6238
AI Engine 2.8.4 - Insecure OAuth Implementation
8.0
CVSS
0.4%
EPSS
No
On KEV
Description
The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the 'redirect_uri' parameter is missing validation during the authorization flow. This makes it possible for unauthenticated attackers to intercept the authorization code and obtain an access token by redirecting the user to an attacker-controlled URI. Note: OAuth is disabled, the 'Meow_MWAI_Labs_OAuth' class is not loaded in the plugin in the patched version 2.8.5.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AE
AI Engine · tigroumeow
2.8.4 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6238
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6238
Product
https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.8.4/labs/oauth.php
Patch
https://plugins.trac.wordpress.org/changeset/3321384/ai-engine/trunk/labs/mcp.php
Patch
https://plugins.trac.wordpress.org/changeset/3321384/ai-engine/trunk/labs/oauth.php
Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/1edc84fd-8cb5-4899-9444-1b6ae3144917?source=cve
More from AI Engine
8.8
CVE-2025-7847
AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2025-5071
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP