Description
The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.
Published: 2025-11-05
Score: 9.8 Critical
EPSS: 74.8% High
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The AI Engine plugin for WordPress has an insecure REST API endpoint at /mcp/v1/ that, when the No-Auth URL option is enabled, returns a bearer token to anyone who can access the endpoint. An unauthenticated attacker can retrieve this token, which can be used to impersonate an authenticated session and perform privileged actions such as creating an administrator account. This vulnerability is a Sensitive Data Exposure (CWE‑200) that leads directly to privilege escalation.

Affected Systems

The vulnerability affects the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin from the vendors tigroumeow, for all releases up to and including version 3.1.3.

Risk and Exploitability

The CVSS score of 9.8 indicates a critical severity, and the EPSS score of 75% suggests a high likelihood of exploitation. The description indicates an unauthenticated REST API endpoint; attacker access could exploit it remotely to retrieve the bearer token immediately. The vulnerability is not yet listed in the CISA KEV catalog.

Generated by OpenCVE AI on June 24, 2026 at 11:41 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest AI Engine plugin release that removes the token exposure (any version newer than 3.1.3).
  • If an update is not possible immediately, disable the No-Auth URL option or otherwise restrict the /mcp/v1/ endpoint to require authentication.
  • If disabling the option is web firewall to allow access to the /mcp/v1/ endpoint only from trusted IP addresses, ensuring that only authorized users can reach it.

Generated by OpenCVE AI on June 24, 2026 at 11:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 05 Nov 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 05 Nov 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Wordpress
Wordpress wordpress
Vendors & Products Wordpress
Wordpress wordpress

Wed, 05 Nov 2025 05:45:00 +0000

Type Values Removed Values Added
Description The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.
Title AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation
Weaknesses CWE-200
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Wordpress Wordpress
cve-icon MITRE

Status: PUBLISHED

Assigner: Wordfence

Published:

Updated: 2026-04-08T16:33:50.495Z

Reserved: 2025-10-14T15:04:46.388Z

Link: CVE-2025-11749

cve-icon Vulnrichment

Updated: 2025-11-05T14:18:11.780Z

cve-icon NVD

Status : Deferred

Published: 2025-11-05T06:15:33.097

Modified: 2026-06-17T08:31:06.537

Link: CVE-2025-11749

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-24T11:45:02Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor