The AI Engine plugin for WordPress lets an unauthenticated attacker list and delete files that other users have uploaded because a capability check is missing in the rest_list and delete_files functions. This flaw can compromise the confidentiality of user–uploaded content and damage integrity by removing legitimate files. It represents a classic missing authorization weakness (CWE‑862).

WordPress sites that use the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin, versions up to and including 2.9.5 are affected.

With a CVSS score of 6.5 the vulnerability is moderate, but its EPSS score of <1 % indicates a very low exploitation likelihood. The flaw is not listed in the CISA KEV catalog. Attackers would need to hit the vulnerable REST endpoints, which are currently accessible to anyone, and then supply the appropriate file identifiers to list or delete them. Because authentication is bypassed, the impact is limited primarily to the files owned by other users on the same site.