Path traversal in AI Engine plugin lets subscribers delete media files
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
The AI Engine (MCP Server & AI Chatbot for WordPress) plugin is affected in all versions up to and including 3.8.4. Insufficient file path validation in the upload_file function is a path traversal flaw (CWE-22). An authenticated attacker with subscriber-level access or above can delete arbitrary media files on the server, but only when the administrator has enabled the Public API option.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Description from the CNA
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload_file function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary media files on the server. This requires the administrator to have enabled the Public API option, and exploitation depends on the hourly cleanup_files task running after the malicious upload.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| tigroumeow | AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini | up to 3.8.4 | — | No fix listed | CNA |
- AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini Vendortigroumeow Affected up to 3.8.4 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for AI Engine (MCP Server & AI Chatbot for WordPress).
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Timeline
- 2026-10-28 Threatist record created from CVE-2026-107745
- 2026-10-28 Alias added: GHSA-xfc5-7gqh-v42g
- 2026-10-29 CISA SSVC decision points changed
References
Other 7
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d4f8607c-711e-4d0e-8379-49346033a837?source=cve
- https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.8.3/classes/modules/files.php#L470
- https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.8.3/classes/modules/files.php#L62
- https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.8.3/classes/modules/files.php#L1071
- https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.8.3/classes/api.php#L689
- https://plugins.trac.wordpress.org/browser/ai-engine/tags/3.8.3/classes/api.php#L1040
- https://plugins.trac.wordpress.org/changeset?old_path=%2Fai-engine%2Ftags%2F3.8.4%2Fclasses%2Fmodules%2Ffiles.php&new_path=%2Fai-engine%2Ftags%2F3.8.5%2Fclasses%2Fmodules%2Ffiles.php
More tigroumeow vulnerabilities
- TI-2025-10772 AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation CVSS 3.1CRITICAL 9.8
- TI-2023-28063 WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability CVSS 3.1CRITICAL 10.0
- TI-2024-09725 AI-Engine < 2.6.5 - Admin+ SQLi CVSS 3.1HIGH 7.2
- TI-2024-05988 AI Engine < 2.5.1 - Admin+ RCE CVSS 3.1HIGH 7.2
- TI-2024-19264 WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability CVSS 3.1MEDIUM 6.8
- TI-2024-06230 AI Engine < 2.4.8 - Admin+ SQLi CVSS 3.1MEDIUM 4.7
Sources
- CVE-2026-107745 · CVE Program
- CVE-2026-107745 · NVD
- FIRST EPSS
- GHSA-xfc5-7gqh-v42g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences