VendorsMeow Appsai_engineall versions
Vulnerabilities

Meow Apps AI Engine

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2023-51409
WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability
Published 2024-04-12 · Modified
10.0EPSS 0.631
CVE-2024-34440
WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability
Published 2024-05-13 · Modified
9.1EPSS 0.008
CVE-2024-29100
WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability
Published 2024-03-28 · Modified
9.1EPSS 0.006
CVE-2025-5071
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP
Published 2025-06-19 · Analyzed
8.8EPSS 0.007
CVE-2025-6238
AI Engine 2.8.4 - Insecure OAuth Implementation
Published 2025-07-04 · Analyzed
8.0EPSS 0.003
CVE-2024-0699
AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url
Published 2024-02-05 · Modified
7.2EPSS 0.012
CVE-2024-6451
AI Engine < 2.5.1 - Admin+ RCE
Published 2024-08-19 · Analyzed
7.2EPSS 0.008
CVE-2024-10499
AI-Engine < 2.6.5 - Admin+ SQLi
Published 2024-12-12 · Analyzed
7.2EPSS 0.006
CVE-2024-38791
WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability
Published 2024-08-01 · Analyzed
7.1EPSS 0.002
CVE-2024-29090
WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability
Published 2024-03-28 · Analyzed
6.8EPSS 0.009
CVE-2025-5570
AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
Published 2025-07-08 · Analyzed
5.4EPSS 0.002
CVE-2023-2580
AI-Engine < 1.6.83 - Admin+ Stored XSS
Published 2023-06-27 · Modified
4.8EPSS 0.005
CVE-2024-6723
AI Engine < 2.4.8 - Admin+ SQLi
Published 2024-09-13 · Analyzed
4.7EPSS 0.005