{"id":"CVE-2026-107745","kind":"vulnerability","aliases":["CVE-2026-107745"],"related":[],"title":"AI Engine WordPress plugin: subscribers can delete arbitrary media files","description":"The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload_file function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary media files on the server. This requires the administrator to have enabled the Public API option, and exploitation depends on the hourly cleanup_files task running after the malicious upload.","summary":"The AI Engine WordPress plugin's upload_file function does not validate file paths properly, through versions up to and including 3.8.4. An authenticated user with subscriber-level access can get the server's hourly cleanup task to delete arbitrary media files.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other","self-hosted","wordpress","wordpress-plugin"],"not_affected_if":["auth-required","default-config"],"how_to_check":"- Check the installed plugin version against `3.8.4` in the WordPress plugin list or the plugin's main file header.\n- In the plugin settings, check whether the Public API option is enabled; the sources say exploitation requires it.","fix":"- Update the AI Engine plugin to a release later than `3.8.4`.\n- If the update cannot be applied right away, disable the Public API option; the sources say exploitation requires it.","status":"open","published_at":"2026-10-28T03:17:09+00:00","first_seen_at":"2026-10-28T03:31:01+00:00","triaged_at":"2026-10-28T03:32:57+00:00","updated_at":"2026-10-28T03:32:57+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-10-28T03:32:57Z","model":"claude-haiku-5-5","output":{"fix":"- Update the AI Engine plugin to a release later than `3.8.4`.\n- If the update cannot be applied right away, disable the Public API option; the sources say exploitation requires it.","reach":"internet","title":"AI Engine WordPress plugin: subscribers can delete arbitrary media files","impact":"medium","summary":"The AI Engine WordPress plugin's upload_file function does not validate file paths properly, through versions up to and including 3.8.4. An authenticated user with subscriber-level access can get the server's hourly cleanup task to delete arbitrary media files.","category":"other","nicknames":[],"who_cares":["wordpress","wordpress-plugin","self-hosted"],"confidence":0.8,"needs_auth":"yes","worst_case":"Arbitrary media files on the server get deleted by a low-privilege user.","analyst_note":"","how_to_check":"- Check the installed plugin version against `3.8.4` in the WordPress plugin list or the plugin's main file header.\n- In the plugin settings, check whether the Public API option is enabled; the sources say exploitation requires it.","needs_analyst":false,"not_affected_if":["default-config","auth-required"],"who_is_affected":"Sites running AI Engine up to and including `3.8.4` with the Public API option enabled, where subscriber-level accounts exist. Sites on a later version, or with the Public API option disabled, are not exposed according to the sources.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.001041,"input_tokens":3397,"output_tokens":1402,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-107745':13A,16A '-2026':12A,15A '3.8.4':46B,106C 'access':54B,118C 'administr':132C 'ai':1A,26B,69C,73C 'api':138C 'arbitrari':8A,65B,123C 'attack':113C 'authent':48B,112C 'chatbot':72C 'cleanup':61B,146C 'cve':11A,14A 'delet':7A,64B,87C,122C 'depend':142C 'due':88C 'enabl':135C 'engin':2A,27B,70C 'exploit':141C 'file':10A,32B,37B,67B,86C,91C,97C,125C,147C 'framework':74C 'function':33B,98C 'get':56B 'host':20B 'hour':60B,145C 'includ':45B,105C 'insuffici':90C 'level':53B,117C 'limit':84C 'make':108C 'malici':152C 'mcp':75C 'media':9A,66B,85C,124C 'option':139C 'path':38B,92C 'plugin':4A,24B,29B,78C 'possibl':110C 'proper':39B 'public':137C 'requir':130C 'run':149C 'self':19B 'self-host':18B 'server':58B,128C 'subscrib':5A,52B,116C 'subscriber-level':51B,115C 'task':62B,148C 'upload':31B,96C,153C 'user':49B 'valid':36B,93C 'version':41B,101C 'vulner':82C 'wordpress':3A,21B,23B,28B,77C,80C 'wordpress-plugin':22B","nicknames":[],"mitigations":[],"who_affected":"Sites running AI Engine up to and including `3.8.4` with the Public API option enabled, where subscriber-level accounts exist. Sites on a later version, or with the Public API option disabled, are not exposed according to the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T03:17:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","cvss_by":"security@wordfence.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107745","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107745","severity":null,"published_at":"2026-10-28T03:17:09+00:00","modified_at":"2026-10-28T03:17:09+00:00","first_seen_at":"2026-10-28T03:31:01+00:00","fetched_at":"2026-10-28T03:31:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}