CVE-2025-7780

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling get_audio(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to read any file on the web server and exfiltrate it via the plugin’s OpenAI API integration.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/api.php#L625
https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/engines/chatml.php#L829
https://plugins.trac.wordpress.org/changeset/3332540/
https://wordpress.org/plugins/ai-engine/#developers
https://www.wordfence.com/threat-intel/vulnerabilities/id/513274bc-3016-4adb-be78-b13c5fae9c03?source=cve

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) El complemento AI Engine para WordPress es vulnerable a la exposición de información confidencial en todas las versiones hasta la 2.9.4 incluida. El endpoint simpleTranscribeAudio no restringe los esquemas de URL antes de llamar a get_audio(). Esto permite que atacantes autenticados, con acceso de suscriptor o superior, lean cualquier archivo del servidor web y lo exfiltren mediante la integración de la API OpenAI del complemento.

24 Jul 2025, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-24 10:15

Updated : 2026-06-17 10:05

NVD link : CVE-2025-7780

Mitre link : CVE-2025-7780

CVE.ORG link : CVE-2025-7780

JSON object : View

Products Affected

No product.

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2025-7780", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-7780", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-07-24T13:15:12.490534Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "tigroumeow", "product": "AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.9.4"}], "defaultStatus": "unaffected"}]}], "published": "2025-07-24T10:15:28.603", "references": [{"url": "https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/api.php#L625", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/engines/chatml.php#L829", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3332540/", "source": "security@wordfence.com"}, {"url": "https://wordpress.org/plugins/ai-engine/#developers", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/513274bc-3016-4adb-be78-b13c5fae9c03?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling get_audio(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to read any file on the web server and exfiltrate it via the plugin\u2019s OpenAI API integration."}, {"lang": "es", "value": "El complemento AI Engine para WordPress es vulnerable a la exposici\u00f3n de informaci\u00f3n confidencial en todas las versiones hasta la 2.9.4 incluida. El endpoint simpleTranscribeAudio no restringe los esquemas de URL antes de llamar a get_audio(). Esto permite que atacantes autenticados, con acceso de suscriptor o superior, lean cualquier archivo del servidor web y lo exfiltren mediante la integraci\u00f3n de la API OpenAI del complemento."}], "lastModified": "2026-06-17T10:05:38.633", "sourceIdentifier": "security@wordfence.com"}