The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin contains a flaw in its upload_file function that fails to properly validate file paths, allowing authorized subscribers to delete arbitrary media files on the server. This limitation exists in all versions up to and including 3.8.4 and requires the Public API option to be enabled. The deletion occurs when the scheduled cleanup_files task runs, meaning the attack relies on a valid time window after the malicious upload.

The vulnerability affects the WordPress plugin AI Engine – MCP Server & AI Chatbot for WordPress, versions 3.8.4 and earlier, when deployed with the Public API enabled. All sites running these versions of the plugin that grant subscriber-level access to authenticated users are at risk.

The CVSS score of 4.2 indicates moderate severity, and the EPSS score is not available while the KEV catalog does not list this issue. The exploit requires valid subscriber credentials and the Public API to be active, limiting the attack surface but still allowing a legitimate attacker to remove media files. Once the cleanup task runs, the deletion will be performed, potentially disrupting website content and operations. The weakness aligns with CWE-22, reflecting insufficient path validation.