The AI Engine plugin for WordPress contains a Server‑Side Request Forgery flaw in the get_audio function that allows any authenticated user with Subscriber‑level permissions or higher to issue arbitrary HTTP requests from the web application. An attacker can query and, if the Public API is enabled and the server’s allow_url_fopen is On, potentially modify data on internal services, exposing confidentiality and integrity risks to internal resources and possibly compromising availability if abusive traffic is generated. This weakness is categorized as CWE‑918.

All versions of the AI Engine – The Chatbot, AI Framework & MCP for WordPress up to and including 3.3.2 are affected. The plugin is distributed by tigroumeow and installed via WordPress’s plugin system.

The vulnerability carries a CVSS score of 6.4, indicating moderate severity. The EPSS score is below 1 %, implying that, despite the presence of the flaw, the likelihood of exploitation is currently low. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an authenticated state, so a compromised or malicious subscriber account can leverage the flaw, but an attacker must first obtain login credentials or otherwise elevate to a role with the necessary permissions.