WordPress: Unauthorized Access and Data Modification in AI Engine Plugin

In AI Engine plugin for WordPress versions 2.8.0 through 2.8.3 a high severity vulnerability CVE-2025-5071 was detected. This vulnerability allows authenticated attackers with Subscriber-level access and above to gain unauthorized access to the MCP, enabling them to execute various commands such as `wp_create_user`, `wp_update_user`, `wp_update_option`, `wp_update_post`, and others. These actions can lead to privilege escalation and data loss. To address this issue, users should upgrade AI Engine plugin to versions 2.8.4 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-5071.