CVE-2023-51409

Description

References

• patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-1-9-98-unauthenticated-arbitrary-file-upload-vulnerability · Third Party Advisory
• JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409

Altre vulnerabilità di ai engine

• CVE-2025-5570MEDIO 5.4The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all version…
• CVE-2025-6238ALTO 8.0The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the …
• CVE-2025-5071ALTO 8.8The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on …
• CVE-2024-10499ALTO 7.2The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a …
• CVE-2024-6723MEDIO 4.7The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to…