Description
Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jordy Meow | AI Engine: ChatGPT Chatbot | ≤ 1.9.98 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2023-51409 ★ 1 · Jan 22, 2026
Unauthenticated 0-click RCE exploit for CVE-2023-51409. Abuses an arbitrary file upload flaw in the AI Engine WordPress plugin to upload a PHP webshell and achieve remote command execution without au…
-
RandomRobbieBF/CVE-2023-51409 ★ 1 · Feb 22, 2024
AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload
-
Nxploited/CVE-2023-51409 ★ 0 · Jan 3, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Jordy Meow AI Engine - Unrestricted File Upload http/cves/2023/CVE-2023-51409.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.