Meowapps Ai Engine vulnerabilities

• meowapps ai engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +1 more AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter CVE-2025-5570 5.4 MediumJuly 8, 2025
• jordy meow ai engine AI Engine 2.8.4 - Insecure OAuth Implementation CVE-2025-6238 8.0 HighJuly 4, 2025
• jordy meow ai engine AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP CVE-2025-5071 8.8 HighJune 19, 2025
• jordy meow ai engine AI-Engine < 2.6.5 - Admin+ SQLi CVE-2024-10499 7.2 HighDecember 12, 2024
• jordy meow ai engine AI Engine < 2.4.8 - Admin+ SQLi CVE-2024-6723 4.7 MediumSeptember 13, 2024
• ai engine project engine, jordy meow ai engine +1 more AI Engine < 2.5.1 - Admin+ RCE CVE-2024-6451 7.2 HighAugust 19, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 more WordPress AI ENGINE plugin <= 2.4.7 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-38791 4.9 MediumAugust 1, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine +1 more WordPress AI Engine plugin <= 2.2.63 - Auth. Arbitrary File Upload vulnerability CVE-2024-34440 9.1 CriticalMay 13, 2024
• ai engine project engine, jordy meow ai engine: chatgpt chatbot, meowapps ai engine +2 more WordPress AI Engine plugin <= 1.9.98 - Unauthenticated Arbitrary File Upload vulnerability CVE-2023-51409 Public exploit EPSS 63.1% 10.0 CriticalApril 12, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine +2 more WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-29090 6.8 MediumMarch 28, 2024
• jordy meow ai engine: chatgpt chatbot, meowapps ai engine, jordy meow ai-engine chatgpt chatbot +2 more WordPress AI Engine plugin <= 2.1.4 - Arbitrary File Upload vulnerability CVE-2024-29100 9.1 CriticalMarch 28, 2024
• meowapps ai engine, tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress +1 more AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url CVE-2024-0699 6.6 MediumFebruary 5, 2024
• meowapps ai engine, unknown ai engine: chatgpt chatbot, content generator, gpt 3 & 4, ultra-customizable +1 more AI-Engine < 1.6.83 - Admin+ Stored XSS CVE-2023-2580 4.8 MediumJune 27, 2023