CSRF in the AI Engine plugin permits an unauthenticated attacker to add new administrator accounts by exploiting missing nonce validation in the reauth_for_authorize function. Tricking a site administrator into clicking a crafted link triggers a CSRF‑based REST authentication bypass that, together with WordPress’s method‑override support, converts a GET request into an authenticated POST to the users endpoint, granting full administrative control over the site. This leads to total takeover, compromising confidentiality, integrity, and availability.

Affected are installations of the AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin from the vendor tigroumeow, for all versions up to and including 3.6.5. No further version information is available in the current data set.

The vulnerability’s CVSS score of 8.8 indicates high severity, yet its EPSS score of less than 1% suggests a low likelihood of exploitation at present. The flaw is not listed in CISA’s KEV catalog. The attack vector requires social engineering—compelling an administrator to click a malicious link—which is plausible but still limited in feasibility. Once an admin account is created, the attacker achieves full privilege escalation. Because the flaw permits account creation without prior credentials, the potential damage is significant.