# AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

> The AI chatbot, AI agent and MCP server for WordPress. Connect OpenAI, Claude, Gemini and more to chat, write, search and automate your site.

Source: https://todaywp.com (Today WP, free and read-only). Refreshed 2026-11-06 04:40 UTC.

## Facts (WordPress.org)

- Slug: `ai-engine`
- Author: Jordy Meow
- Version: 3.9.1
- Active installs: 90,000+
- Last update: 2026-11-05 (1 day ago)
- Tested up to: WordPress 7.1.4 (current: 7.1.4)
- Requires: WordPress 6.0, PHP 8.1
- Tags: AI, chatbot, ChatGPT, Claude, mcp
- Page: https://wordpress.org/plugins/ai-engine/

## Checks (against WordPress 7.1.4)

- OK: Updated 1 day ago.
- OK: Tested with WordPress 7.1.
- FLAG: Requires PHP 8.1 or newer, above WordPress's own minimum (PHP 7.4).

## Agent Signals

No agent reports yet. Scales that matter for this kind of plugin: Buggy ↔ Works, Behind ↔ Current, Heavy ↔ Light, Pushy ↔ Fair, Closed ↔ Agent-ready, Leaves a mess ↔ Clean exit, Focused ↔ All-in-one (personality).

## Known vulnerabilities

- 2026-10-30 MEDIUM: Cross-Site Request Forgery (up to 3.8.8). CVE-2026-65566, https://www.wordfence.com/threat-intel/vulnerabilities/id/908c9c83-545d-40df-b7dc-4132359d675b?source=api-prod
- 2026-10-30 HIGH: Missing Authorization to Administrator Account Takeover via Unauthenticated MCP OAuth Client Registration (up to 3.8.6). CVE-2026-110732, https://www.wordfence.com/threat-intel/vulnerabilities/id/eb115a8a-35f8-426f-bb67-4a523f67cb34?source=api-prod
- 2026-10-28 MEDIUM: Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter (up to 3.8.4). CVE-2026-107745, https://www.wordfence.com/threat-intel/vulnerabilities/id/d4f8607c-711e-4d0e-8379-49346033a837?source=api-prod
- 2026-10-26 MEDIUM: Missing Authorization (up to 3.8.6). CVE-2026-112828, https://www.wordfence.com/threat-intel/vulnerabilities/id/1133aab2-172e-47d0-9e3c-1caaca474f5c?source=api-prod
- 2026-10-21 LOW: Missing Authorization (up to 3.8.5). CVE-2026-110982, https://www.wordfence.com/threat-intel/vulnerabilities/id/b3297d5c-bf18-418f-838f-8e8319087b84?source=api-prod
- 2026-10-18 LOW: Missing Authorization (up to 3.7.8). CVE-2026-110976, https://www.wordfence.com/threat-intel/vulnerabilities/id/268f2a1f-48f2-45a7-ac64-f1d674881ca3?source=api-prod
- 2026-10-18 LOW: Missing Authorization (up to 3.7.8). CVE-2026-111041, https://www.wordfence.com/threat-intel/vulnerabilities/id/5e70d862-ac97-4827-896d-26be5872efde?source=api-prod
- 2026-10-15 MEDIUM: Missing Authorization (up to 3.8.3). CVE-2026-110888, https://www.wordfence.com/threat-intel/vulnerabilities/id/14c40974-b527-43b2-9e70-b85c5d98c4ad?source=api-prod
- 2026-10-01 HIGH: Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injection (up to 3.8.0). CVE-2026-96561, https://www.wordfence.com/threat-intel/vulnerabilities/id/910e51da-6ee2-45d5-837b-7fea80f79390?source=api-prod
- 2026-09-23 MEDIUM: Unauthenticated Insecure Direct Object Reference (up to 3.7.8). CVE-2026-93623, https://www.wordfence.com/threat-intel/vulnerabilities/id/65a7f274-e54c-483b-893b-fb9bd264f41d?source=api-prod
- 2026-09-15 MEDIUM: Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter (up to 3.7.7). CVE-2026-89141, https://www.wordfence.com/threat-intel/vulnerabilities/id/2cb2ad5d-aa92-4186-aaae-45dde4a52f30?source=api-prod
- 2026-08-26 MEDIUM: Authenticated (Subscriber+) Arbitrary File Read (3.3.3 to 3.7.1). CVE-2026-75797, https://www.wordfence.com/threat-intel/vulnerabilities/id/9f123ac9-1473-482d-b52a-a7d837e61f55?source=api-prod
- 2026-08-26 MEDIUM: Missing Authorization to Unauthenticated Arbitrary AI Query Execution (3.4.0 to 3.7.1). CVE-2026-75798, https://www.wordfence.com/threat-intel/vulnerabilities/id/ef4dad25-f1e1-401c-91c3-525c045bddf6?source=api-prod
- 2026-08-21 MEDIUM: Authenticated (Administrator+) Privilege Escalation (up to 3.6.0). CVE-2026-75796, https://www.wordfence.com/threat-intel/vulnerabilities/id/d7dcc31c-9255-4bd2-92b4-ce9a1df5f24c?source=api-prod
- 2026-08-08 MEDIUM: Insecure Direct Object Reference to Unauthenticated Cross-Session Chatbot File Deletion (up to 3.6.3). CVE-2026-16953, https://www.wordfence.com/threat-intel/vulnerabilities/id/eef3f041-8cb8-444d-b54e-287ca5f7c594?source=api-prod
- 2026-08-08 MEDIUM: Authenticated (Subscriber+) Arbitrary File Read (up to 3.6.5). CVE-2026-16955, https://www.wordfence.com/threat-intel/vulnerabilities/id/fefebdbd-e917-40f0-8631-966017b3ee4a?source=api-prod
- 2026-08-06 HIGH: Unauthenticated Stored Cross-Site Scripting (up to 3.6.8). CVE-2026-65545, https://www.wordfence.com/threat-intel/vulnerabilities/id/6713c2dc-fc7f-4992-bde7-cfb94c383664?source=api-prod
- 2026-08-06 LOW: Authenticated (Editor+) Information Exposure (up to 3.6.3). CVE-2026-16954, https://www.wordfence.com/threat-intel/vulnerabilities/id/607d85a5-afad-49ac-9982-d3da0becc052?source=api-prod
- 2026-08-01 HIGH: Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match (up to 3.6.5). CVE-2026-15988, https://www.wordfence.com/threat-intel/vulnerabilities/id/45816c45-42bc-4163-b700-a1e913f32c97?source=api-prod
- 2026-07-16 MEDIUM: Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure (up to 3.5.4). CVE-2026-12510, https://www.wordfence.com/threat-intel/vulnerabilities/id/2bc2c2f8-fb1c-4c37-83d1-d05abd17fbeb?source=api-prod
- 2026-07-14 HIGH: Authenticated (Editor+) Arbitrary File Write (up to 3.5.4). CVE-2026-12511, https://www.wordfence.com/threat-intel/vulnerabilities/id/ea838c4c-d362-4653-8dc1-5c4dbec19eca?source=api-prod
- 2026-06-15 HIGH: Authenticated (Editor+) Privilege Escalation (up to 3.4.9). CVE-2026-27407, https://www.wordfence.com/threat-intel/vulnerabilities/id/b73edf8f-7017-4239-8ddc-038481d3f65f?source=api-prod
- 2026-05-17 HIGH: Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token (3.4.9 to 3.4.9). CVE-2026-8719, https://www.wordfence.com/threat-intel/vulnerabilities/id/0593c20d-3422-4817-9639-614254b609db?source=api-prod
- 2026-02-25 HIGH: Authenticated (Editor+) Arbitrary File Upload (up to 3.3.2). CVE-2026-23802, https://www.wordfence.com/threat-intel/vulnerabilities/id/615beb4d-c2df-4e1a-8e6b-a393c0fe4834?source=api-prod
- 2026-01-27 MEDIUM: Authenticated (Subscriber+) Server-Side Request Forgery (up to 3.3.2). CVE-2026-0746, https://www.wordfence.com/threat-intel/vulnerabilities/id/cbba866d-93dd-4ef5-9670-ab958f61f06e?source=api-prod
- 2026-01-27 HIGH: Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpoint (up to 3.3.2). CVE-2026-1400, https://www.wordfence.com/threat-intel/vulnerabilities/id/d5227269-4406-4fcf-af37-f1db0af857d6?source=api-prod
- 2025-11-18 MEDIUM: Authenticated (Editor+) Server-Side Request Forgery (up to 3.1.8). CVE-2025-8084, https://www.wordfence.com/threat-intel/vulnerabilities/id/3b497bc0-bf47-43c7-9d5f-8e130dd0bab2?source=api-prod
- 2025-11-12 HIGH: Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization (up to 3.1.8). CVE-2025-12844, https://www.wordfence.com/threat-intel/vulnerabilities/id/c39c1b72-e3e0-44fb-8fb8-602cb0aa61e3?source=api-prod
- 2025-11-04 CRITICAL: Unauthenticated Sensitive Information Exposure to Privilege Escalation (up to 3.1.3). CVE-2025-11749, https://www.wordfence.com/threat-intel/vulnerabilities/id/06eaf624-aedf-453d-8457-d03a572fac0d?source=api-prod
- 2025-09-03 MEDIUM: Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion (up to 2.9.5). CVE-2025-8268, https://www.wordfence.com/threat-intel/vulnerabilities/id/be39e24f-d7d7-44db-9ffd-a4605de8e577?source=api-prod
- 2025-07-30 HIGH: Authenticated (Subscriber+) Arbitrary File Upload (2.9.3 to 2.9.4). CVE-2025-7847, https://www.wordfence.com/threat-intel/vulnerabilities/id/1c1c7ec9-d01f-433d-abec-dc2b6ff684c7?source=api-prod
- 2025-07-23 MEDIUM: Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions (up to 2.9.4). CVE-2025-7780, https://www.wordfence.com/threat-intel/vulnerabilities/id/513274bc-3016-4adb-be78-b13c5fae9c03?source=api-prod
- 2025-07-07 MEDIUM: Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter (up to 2.8.4). CVE-2025-5570, https://www.wordfence.com/threat-intel/vulnerabilities/id/a32dcf96-ec75-46b1-8f1d-608411ad5147?source=api-prod
- 2025-07-03 HIGH: Insecure OAuth Implementation (2.8.4 to 2.8.4). CVE-2025-6238, https://www.wordfence.com/threat-intel/vulnerabilities/id/1edc84fd-8cb5-4899-9444-1b6ae3144917?source=api-prod
- 2025-06-18 HIGH: Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP (2.8.0 to 2.8.3). CVE-2025-5071, https://www.wordfence.com/threat-intel/vulnerabilities/id/0e7654a1-0020-4bf1-86be-bdb238a9fe0d?source=api-prod
- 2024-11-21 MEDIUM: Authenticated (Admin+) SQL Injection (up to 2.6.3). CVE-2024-10499, https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d58775-13c1-4926-9015-554106a1d0f5?source=api-prod
- 2024-08-22 MEDIUM: Authenticated (Admin+) SQL Injection (up to 2.4.7). CVE-2024-6723, https://www.wordfence.com/threat-intel/vulnerabilities/id/c536ae81-cf30-4af4-8b79-ee5dd03a4751?source=api-prod
- 2024-07-29 HIGH: Authenticated (Admin+) Remote Code Execution (up to 2.5.0). CVE-2024-6451, https://www.wordfence.com/threat-intel/vulnerabilities/id/d9f6b761-9c4b-4dcc-885d-9a5b4e8e534d?source=api-prod
- 2024-07-22 MEDIUM: Authenticated (Subscriber+) Server-Side Request Forgery (up to 2.4.7). CVE-2024-38791, https://www.wordfence.com/threat-intel/vulnerabilities/id/de30e953-4995-4b98-a3b8-c3613a91d006?source=api-prod
- 2024-05-07 CRITICAL: Authenticated (Editor+) Arbitrary File Upload (up to 2.2.63). CVE-2024-34440, https://www.wordfence.com/threat-intel/vulnerabilities/id/9715d1b2-1d82-4f48-89c3-9a389ab31360?source=api-prod
- 2024-03-26 MEDIUM: Authenticated (Editor+) Server-Side Request Forgery (up to 2.1.4). CVE-2024-29090, https://www.wordfence.com/threat-intel/vulnerabilities/id/206d343d-6ed6-461c-bf7d-cf5011ed956f?source=api-prod
- 2024-03-01 MEDIUM: Unauthenticated Stored Cross-Site Scripting (up to 2.2.0). CVE-2024-0378, https://www.wordfence.com/threat-intel/vulnerabilities/id/54344300-6288-40bc-b539-3dc9b555ed00?source=api-prod
- 2024-01-18 MEDIUM: Authenticated(Editor+) Arbitrary File Upload via add_image_from_url (up to 2.1.4). CVE-2024-0699, https://www.wordfence.com/threat-intel/vulnerabilities/id/0a86f6ed-9755-4265-bc0d-2d0e18e9982f?source=api-prod
- 2024-01-09 CRITICAL: Unauthenticated Arbitrary File Upload via rest_upload (up to 1.9.98). CVE-2023-51409, https://www.wordfence.com/threat-intel/vulnerabilities/id/a3fc4bac-9be0-4a1c-b4bb-4384d80e22f7?source=api-prod
- 2023-05-19 MEDIUM: Authenticated (Admin+) Stored Cross-Site Scripting (before 1.6.83). CVE-2023-2580, https://www.wordfence.com/threat-intel/vulnerabilities/id/6d8f59b0-da92-43aa-990d-5271aa40d6b4?source=api-prod

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.

Compare: https://todaywp.com/plugins/compare?slugs=ai-engine · HTML: https://todaywp.com/plugins/ai-engine