CVE-2026-107745: AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the uploadfile function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary media files on the server. This requires the administrator to have enabled the Public API option, and exploitation depends on the hourly cleanupfiles task running after the malicious upload.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using AI Engine versions up to and including 3.8.4 are exposed only if the administrator has enabled the plugin's Public API option. An attacker must also have an authenticated WordPress account with at least subscriber-level access.
What must happen for an attack to succeed?
The attacker needs to submit a malicious upload using the metadata parameter, then the plugin's hourly cleanup_files task must run. The described impact is deletion of arbitrary media files on the server.
How can I determine whether exploitation is possible in my environment?
Check whether AI Engine is installed at version 3.8.4 or earlier, whether its Public API option is enabled, and whether untrusted users can obtain or already hold subscriber-or-higher WordPress accounts. Also confirm that the hourly cleanup_files task is active, since the deletion depends on that task running.
What can be done if updating is not immediately possible?
Disable the AI Engine Public API option to remove a stated prerequisite for exploitation. Restrict or remove subscriber-level access for untrusted accounts until the affected plugin version can be addressed.