Critical · published November 5, 2025
CVSS calls it critical at 9.8. It sits in the 99.5th percentile for exploit probability.
🚨 An off-the-shelf WordPress plugin is accidentally spilling your digital secrets! This vulnerability in the AI Engine plugin allows unauthenticated attackers to grab sensitive 'Bearer Tokens' with ease. 🔥 Think of it like a restaurant that leaves the back door wide open during a busy dinner rush, allowing anyone to sneak in and steal the chef's secrets. The exposed token is like a master key that grants access to all the kitchen (your site) operations, from creating new staff to altering menus. An attacker could waltz right in and elevate their privileges to an administrator level, enabling them to create new accounts, manipulate settings, or even take your site offline. This isn’t just a minor annoyance—it’s an absolute devastation of your site’s integrity!
Think of it like a restaurant that leaves the back door wide open during a busy dinner rush, allowing anyone to sneak in and steal the chef's secrets. The exposed token is like a master key that grants access to all the kitchen (your site) operations, from creating new staff to altering menus. This vulnerability in the AI Engine plugin, present in all versions up to 3.1.3, exposes the 'Bearer Token' through the /mcp/v1/ REST API endpoint when the 'No-Auth URL' option is enabled, allowing attackers to access valid sessions.
An attacker could waltz right in and elevate their privileges to an administrator level, enabling them to create new accounts, manipulate settings, or even take your site offline. This isn’t just a minor annoyance—it’s an absolute devastation of your site’s integrity! Immediately update the AI Engine plugin to version 3.1.4 or later to close this vulnerability. Additionally, review your plugin settings to ensure that the 'No-Auth URL' option is disabled to prevent future exposures. You've got this! With these steps, you can secure your site and protect your digital kitchen from unwanted guests. 🛡️