CVE-2024-38791

Description

References

• patchstack.com/database/vulnerability/ai-engine/wordpress-ai-engine-plugin-2-4-7-server-side-request-forgery-ssrf-vulnerability · Third Party Advisory

ai engine의 다른 취약점

• CVE-2025-5570보통 5.4The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all version…
• CVE-2025-6238높음 8.0The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth implementation, as the …
• CVE-2025-5071높음 8.8The AI Engine plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on …
• CVE-2024-10499높음 7.2The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a …
• CVE-2024-6723보통 4.7The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to…