CVE-2024-38791

概要

参考情報

• patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-2-4-7-server-side-request-forgery-ssrf-vulnerability · Third Party Advisory

ai engine のその他の脆弱性

• CVE-2025-5570中 5.4The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all version…
• CVE-2025-6238高 8.0The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the …
• CVE-2025-5071高 8.8The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on …
• CVE-2024-10499高 7.2The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a …
• CVE-2024-6723中 4.7The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to…