Server-Side Request Forgery Vulnerability in AI Engine Plugin for WordPress

CVE-2025-8084

What is CVE-2025-8084?

The AI Engine plugin for WordPress is susceptible to Server-Side Request Forgery (SSRF) due to the vulnerabilities found in the rest_helpers_create_images function. Authenticated attackers with Editor-level access or higher can exploit this vulnerability to issue web requests to any location from the web application. This exploitation can lead to unauthorized access to internal services and the ability to modify and query sensitive information. In cloud environments, this vulnerability particularly exposes metadata retrieval risks, further heightening security concerns.

References