The AI Engine WordPress plugin fails to perform an authorization check on a privileged administrative function. The plugin issues a token to any anonymous visitor and trusts that token when the editor assistant is used. This flaw allows an attacker to send any AI query to the site owner's configured provider account, potentially leaking sensitive content or consuming provider quota. The primary impact is unauthorized data access and abuse of the AI service, which could lead to privacy violations, data exfiltration, or significant cost outlays for the site owner.

WordPress sites running the AI Engine plugin in versions 3.4.0 up to and including 3.7.1 are affected. The plugin is identified as Unknown:AI Engine in the CNA data; the vulnerability exists for all installations that have the editor assistant feature enabled.

The flaw can be exploited without any authentication or discovery steps, as the token is automatically distributed to every visitor. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, but the lack of an auth check means the attack surface is large and the risk of exploitation is high. Because the attacker can craft arbitrary AI queries, the potential for data leakage or resource abuse is significant. The CVSS score is not provided, but the inherent ability to execute privileged queries from an unauthenticated user indicates a high severity scenario.