https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5570.htmlhttps://patchthecve.com/cve/CVE-2025-5570.htmlWed, 17 Jun 2026 09:48:11 +0000MEDIUM 5.4: The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lehttps://patchthecve.com/cve/CVE-2024-10499.htmlhttps://patchthecve.com/cve/CVE-2024-10499.htmlWed, 17 Jun 2026 06:55:48 +0000HIGH 7.2: The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attackshttps://patchthecve.com/cve/CVE-2024-6723.htmlhttps://patchthecve.com/cve/CVE-2024-6723.htmlWed, 17 Jun 2026 08:18:33 +0000MEDIUM 4.7: The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.https://patchthecve.com/cve/CVE-2024-6451.htmlhttps://patchthecve.com/cve/CVE-2024-6451.htmlWed, 17 Jun 2026 08:18:02 +0000HIGH 7.2: AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path", allowing Administrators to change log filetypes from .log to .php.https://patchthecve.com/cve/CVE-2024-38791.htmlhttps://patchthecve.com/cve/CVE-2024-38791.htmlWed, 17 Jun 2026 07:41:03 +0000MEDIUM 4.9: Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7.