The AI Engine WordPress plugin before 3.6.4 allows a deletion of any uploaded chatbot file simply by providing a session cookie and a file reference. Because the plugin does not verify that the session belongs to the file owner, an attacker who obtains a victim’s session identifier can forcibly delete the victim’s files. The failure represents an improper access control flaw that undermines the integrity of user data and can erode user trust.

Any WordPress site that has installed the AI Engine plugin version earlier than 3.6.4. The vulnerability affects all users of those installations, as the flaw is not limited to a specific role or configuration.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, but the flaw grants unauthenticated remote deletion. An attacker must first acquire a valid session cookie and a reference to the target file, which could be achieved through session hijacking, phishing, or cross‑site scripting. Once those prerequisites are met, the deletion can be performed without further interaction, indicating a high likelihood of exploitation in environments where session protection is weak.