CVE-2025-11749: tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress
Vulnerability summary
CVE-2025-11749 is a critical (CVSS 9.8) vulnerability in tigroumeow ai engine – the chatbot, ai framework & mcp for wordpress. EPSS estimates a 74.66% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 1 public exploit is recorded. Fixed in 3.1.4.
Timeline
- 05-11-2025PublishedVulnerability first disclosed.
- 08-04-2026Last modifiedVulnerability information updated.
Description
The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract the bearer token, which can be used to gain access to a valid session and perform many actions like creating a new administrator account, leading to privilege escalation.
CVSS metrics
3 scores · 3 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- wordfenceSource9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
74.66%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
-0.10 pp
From 74.76% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundWordPress AI Engine Plugin MCP Unauthenticated Admin Creation to RCE
exploit/multi/http/wp_ai_engine_mcp_rce
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Tigroumeow1 product
Wordpress1 product
- ai-engine≤ 3.1.3 (fixed in 3.1.4)
2 vendors · 2 products