https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5570.htmlhttps://patchthecve.com/cve/CVE-2025-5570.htmlWed, 17 Jun 2026 09:48:11 +0000MEDIUM 5.4: The AI Engine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the mwai_chatbot shortcode 'id' parameter in all versions up to, and including, 2.8.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-lehttps://patchthecve.com/cve/CVE-2024-10499.htmlhttps://patchthecve.com/cve/CVE-2024-10499.htmlWed, 17 Jun 2026 06:55:48 +0000HIGH 7.2: The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attackshttps://patchthecve.com/cve/CVE-2024-43332.htmlhttps://patchthecve.com/cve/CVE-2024-43332.htmlWed, 17 Jun 2026 07:50:49 +0000MEDIUM 4.3: Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0.https://patchthecve.com/cve/CVE-2024-6723.htmlhttps://patchthecve.com/cve/CVE-2024-6723.htmlWed, 17 Jun 2026 08:18:33 +0000MEDIUM 4.7: The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.https://patchthecve.com/cve/CVE-2024-6451.htmlhttps://patchthecve.com/cve/CVE-2024-6451.htmlWed, 17 Jun 2026 08:18:02 +0000HIGH 7.2: AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path", allowing Administrators to change log filetypes from .log to .php.https://patchthecve.com/cve/CVE-2024-38791.htmlhttps://patchthecve.com/cve/CVE-2024-38791.htmlWed, 17 Jun 2026 07:41:03 +0000MEDIUM 4.9: Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7.https://patchthecve.com/cve/CVE-2024-35712.htmlhttps://patchthecve.com/cve/CVE-2024-35712.htmlWed, 17 Jun 2026 07:35:14 +0000MEDIUM 4.9: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Jordy Meow Database Cleaner allows Relative Path Traversal.This issue affects Database Cleaner: from n/a through 1.0.5.https://patchthecve.com/cve/CVE-2024-34440.htmlhttps://patchthecve.com/cve/CVE-2024-34440.htmlWed, 17 Jun 2026 07:33:24 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63.https://patchthecve.com/cve/CVE-2023-51409.htmlhttps://patchthecve.com/cve/CVE-2023-51409.htmlWed, 17 Jun 2026 06:40:53 +0000CRITICAL 10.0: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.https://patchthecve.com/cve/CVE-2024-29100.htmlhttps://patchthecve.com/cve/CVE-2024-29100.htmlWed, 17 Jun 2026 07:22:24 +0000CRITICAL 9.1: Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.https://patchthecve.com/cve/CVE-2024-29090.htmlhttps://patchthecve.com/cve/CVE-2024-29090.htmlWed, 17 Jun 2026 07:22:23 +0000MEDIUM 6.8: Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.