Executive brief
The AI Engine plugin for WordPress, which adds AI chatbot capabilities to websites, contains a security flaw in its discussion management feature. An attacker with a basic user account can exploit this to view private chat histories of other users or take control of their conversation records. This could lead to the exposure of sensitive information shared between customers and the AI chatbot.
Technical details
An Insecure Direct Object Reference (IDOR) vulnerability exists in the AI Engine plugin's REST API endpoints for chatbot discussions. The plugin fails to validate ownership of a 'chatId' when a user submits a new message or requests a discussion list. A logged-in user with Subscriber-level permissions can provide a victim's chatId in a request to the '/mwai-ui/v1/chats/submit' endpoint, which reassigns the conversation owner to the attacker. Subsequently, the attacker can view the full chat history via the '/mwai-ui/v1/discussions/list' endpoint. This vulnerability requires the 'Discussions' feature to be enabled and knowledge of the target chatId. The issue is fixed in version 3.5.5.
Affected products
- Jordy Meow AI Engine < 3.5.5
Timeline
- 2026-06-25: disclosed: Public disclosure by WPScan
- 2026-06-25: patched: Fixed in version 3.5.5
- 2026-07-16: advisory: NVD publication date