The AI Engine WordPress plugin, in versions before 3.5.5, fails to confirm that a requesting subscriber owns a chatbot conversation identified by a client‑supplied ID. This omission creates an IDOR flaw (CWE‑639) that permits an authenticated subscriber to read other users’ private conversations and even overwrite their conversation records when the discussions feature is enabled.

Affected deployments include any WordPress site that has installed the AI Engine plugin with a version older than 3.5.5 and has the discussions feature turned on. The vulnerability is contained within the plugin’s conversation handling logic and does not require additional code execution or privileged access beyond subscriber‑level authentication.

The CVSS score of 5.9 indicates moderate severity, and the EPSS score of less than 1 % reflects a low likelihood of exploitation in the near term. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be an IDOR that allows an attacker to supply a conversation ID belonging to a different user; because the plugin does not enforce ownership checks, the attacker gains read or modify access to that conversation. No external code execution is required, and the exploit requires only subscriber‑level authentication with the discussions feature active.