AE
Product
AI Engine
by Meowapps · last CVE Jul 8, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 4Low 0
Watch

Add AI Engine to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-51409
9.8
63%
Apr 12
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98
Affected: before 1.9.99
CVE-2025-5071
8.8
1%
Jun 19
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP
Affected: 2.8.0 before 2.8.4
CVE-2025-6238
8.0
0%
Jul 4
AI Engine 2.8.4 - Insecure OAuth Implementation
Affected: 2.8.4
CVE-2024-10499
7.2
1%
Dec 12
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to…
Affected: before 2.6.5
CVE-2024-6451
7.2
1%
Aug 19
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning
Affected: before 2.4.3
CVE-2024-34440
7.2
1%
May 14
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63
Affected: before 2.2.70
CVE-2024-29100
7.2
1%
Mar 28
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4
Affected: before 2.1.5
CVE-2024-0699
7.2
1%
Feb 5
The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
Affected: through 2.1.4
CVE-2024-38791
7.1
0%
Aug 1
Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from…
Affected: before 2.4.8
CVE-2024-29090
6.8
1%
Mar 28
Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4
Affected: before 2.1.5
CVE-2025-5570
5.4
0%
Jul 8
AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Affected: before 2.8.5
CVE-2023-2580
4.8
0%
Jun 27
The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site…
Affected: before 1.6.83
CVE-2024-6723
4.7
0%
Sep 13
The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin…
Affected: before 2.4.8
Showing 13