Unrestricted File Upload Vulnerability in AI Engine by Jordy Meow
CVE-2026-23802

9.1CRITICAL

Key Information:

Vendor

WordPress
Status
Ai Engine
Vendor
CVE Published:
5 March 2026

What is CVE-2026-23802?

The AI Engine plugin developed by Jordy Meow is vulnerable to an unrestricted file upload issue, allowing attackers to upload malicious files. This flaw can jeopardize the security of the WordPress site and its data by enabling the execution of harmful scripts. The vulnerability affects versions of AI Engine up to 3.3.2, posing risks that site administrators must address urgently to prevent potential exploitation.

Affected Version(s)

AI Engine 0 <= 3.3.2

References

https://patchstack.com/database/Wordpress/Plugin/ai-engin...
vdb-entry

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

0xd4rk5id3 | Patchstack Bug Bounty Program
.