The AI Engine plugin for WordPress contains a flaw in the simpleTranscribeAudio endpoint: the plugin does not validate the URL scheme before passing it to get_audio. An authenticated attacker with Subscriber-level permission can supply a URL that points to any file on the web server, causing the plugin to read that file and return its contents through the OpenAI API integration. The vulnerability enables the exfiltration of sensitive server files and is classified as Sensitive Information Exposure (CWE‑200).

All WordPress sites running the AI Engine plugin, version 2.9.4 or earlier, are affected. The plugin is distributed under the name "AI Engine – The Chatbot, AI Framework & MCP for WordPress" and any installation using these versions can be impacted.

With a CVSS score of 6.5, the technical severity is considered medium. The EPSS score of less than 1% indicates that exploitation attempts are currently unlikely, and the vulnerability is not listed in CISA’s KEV catalog. However, because the attack only requires authenticated access at the subscriber level, organizations that grant such privileges to users or customers are at risk of having server files read through the plugin. Once the issue is addressed, no known exploitation patterns remain beyond the documented path.