Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ai_engine:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAi Engine (f2c444f5-d558-5850-ba45-0dc9003d0aa1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6723 vulnerable 2026-06-08 06:58:20.253139 AI Engine < 2.4.8 - Admin+ SQLi
The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.
Published: 2024-09-13T06:00:02.961Z
Updated: 2024-09-13T15:30:32.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6451 vulnerable 2026-06-08 06:58:19.492821 AI Engine < 2.5.1 - Admin+ RCE
AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logs_path", allowing Administrators to change log filetypes from .log to .php.
Published: 2024-08-19T06:00:05.024Z
Updated: 2024-08-19T17:10:21.720Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10499 vulnerable 2026-06-08 06:23:46.790454 AI-Engine < 2.6.5 - Admin+ SQLi
The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks
Published: 2024-12-12T06:00:09.432Z
Updated: 2024-12-12T15:17:51.374Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.