https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 20:14:44 +0000 https://db.gcve.eu/vuln/cve-2026-107745 <p><strong>Affected:</strong> tigroumeow AI Engine – MCP Server &amp; AI Chatbot for WordPress, with Claude, ChatGPT &amp; Gemini</p> <p>The AI Engine – The Chatbot, AI Framework &amp; MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload_file function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary media files on the server. This requires the administrator to have enabled the Public API option, and exploitation depends on the hourly cleanup_files task running after the malicious upload.</p> <p><strong>Affected:</strong> tigroumeow AI Engine – MCP Server &amp; AI Chatbot for WordPress, with Claude, ChatGPT &amp; Gemini</p> <p>The AI Engine – The Chatbot, AI Framework &amp; MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the upload_file function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary media files on the server. This requires the administrator to have enabled the Public API option, and exploitation depends on the hourly cleanup_files task running after the malicious upload.</p> https://db.gcve.eu/vuln/cve-2026-107745