Skip to content
OpenAdvisories

Vendor

tigroumeow

33 known vulnerabilities.

Products

AI Engine – The Chatbot, AI Framework & MCP for WordPress 14 Meow Gallery 4 AI Engine 3 Meow Lightbox 2 AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini 2 Photo Engine (Media Organizer & Lightroom) 2 Database Cleaner: Cleanup, Optimization & Repair 1 SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress 1 Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF 1 Media Cleaner: Clean your WordPress! 1 Code Engine – PHP Snippets, AI Functions & Automation for WordPress 1 Gallery Custom Links 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-11749 Public exploit Scanner template EPSS 75%

    AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation

    The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for u…

    tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress Web / CMS
  • High 8.8
    CVE-2025-7847 Public exploit

    AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload

    The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_simpleFileUpload() function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level acces…

    tigroumeow AI Engine Web / CMS