PT-2025-35834

CVE-2025-8268

·

Published

2025-09-03

·

Updated

2025-09-04

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions AI Engine plugin for WordPress versions up to and including 2.9.5
Description The AI Engine plugin for WordPress is susceptible to unauthorized access and data loss. This is due to a missing capability check in the rest list and delete files functions, allowing unauthenticated attackers to list and delete files uploaded by other users.
Recommendations Update the AI Engine plugin to a version later than 2.9.5.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2025-8268
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com