AI Engine <= 3.8.4 - Unauthenticated Insecure Direct Object Reference to File Deletion via File Upload Metadata
- ID
- WPSEC-2026-1043
- Plugin
- AI Engine – The Chatbot, AI Framework & MCP for WordPress (ai-engine)
- Affected
- all versions before 3.8.5
- Remediation
- Update to 3.8.5 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weakness
- CWE-639
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-15
- Attack surface
- AI Engine on WPSec AttackSurface
- Fix released
- Published
Description
The AI Engine plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'metadata' parameter of the file upload endpoints (/mwai-ui/v1/files/upload and the Public API simpleFileUpload) in all versions up to, and including, 3.8.4, due to caller-supplied metadata being allowed to overwrite the plugin's reserved file keys (such as file_id, file_expires and provider) and the expired-files cleanup task resolving the files to delete through that stored reference. This makes it possible for unauthenticated attackers to delete files uploaded by other users, either media library attachments created by AI Engine or files stored with the AI provider, when the site stores uploads in the Media Library or the attacker knows the target file's reference. Authenticated attackers with Subscriber-level access can choose the Media Library target themselves when the Public API is enabled.
References
- https://wpsec.com/vuln/WPSEC-2026-1043/
- https://plugins.svn.wordpress.org/ai-engine/tags/3.8.5/
- https://wordpress.org/plugins/ai-engine/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS