Skip to content

Known CVE

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin <= 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled.

CVE-2025-11749

Critical2025CVSS 9.8

cve2025 · wordpress · wp-plugin · ai-engine · exposure · token · vkev · ai

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website