How many tigroumeow AI Engine CVEs are in CISA KEV?

None of tigroumeow AI Engine's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for tigroumeow AI Engine vulnerabilities?

Yes — 1 of tigroumeow AI Engine's CVEs have a known public exploit.

Which versions of tigroumeow AI Engine are affected?

5 distinct tigroumeow AI Engine versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in tigroumeow AI Engine CVEs?

tigroumeow AI Engine's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of tigroumeow AI Engine CVEs?

The average CVSS base score across tigroumeow AI Engine's scored CVEs is 7.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

tigroumeow

6 CVEs

tigroumeow AI Engine Vulnerabilities

Name: tigroumeow AI Engine vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for AI Engine by tigroumeow.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.3

Avg CVSS

2025–2025

Last updated September 3, 2025

Overview

tigroumeow AI Engine has 6 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting tigroumeow AI Engine, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of tigroumeow AI Engine's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of tigroumeow AI Engine's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of tigroumeow AI Engine's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every tigroumeow AI Engine version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 2.8.41 CVE
2.8.0 <= v <= 2.8.31 CVE
2.9.3 <= v <= 2.9.41 CVE

Fixed in

> 2.8.31 CVE
> 2.9.41 CVE

Find a version

6 CVEs

Sort

Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion
CVE-2025-8268
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.3% (17th pct)2025-09-03
AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-7847
Public exploit
Patch
CWE-434
High · CVSS 8.8
EPSS 1.1% (61th pct)2025-07-31
AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions
CVE-2025-7780
Patch
CWE-200
Medium · CVSS 6.5
EPSS 0.5% (40th pct)2025-07-24
AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter
CVE-2025-5570
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.2% (7th pct)2025-07-08
AI Engine 2.8.4 - Insecure OAuth Implementation
CVE-2025-6238CWE-601
High · CVSS 8.0
EPSS 0.3% (23th pct)2025-07-04
AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP
CVE-2025-5071
Patch
CWE-863
High · CVSS 8.8
EPSS 0.6% (47th pct)2025-06-19

Common weakness types

The CWE weakness categories most often found in tigroumeow AI Engine CVEs. Follow any weakness for its full explanation.

Other tigroumeow products

Browse vulnerabilities for other products by tigroumeow.

AI Engine – The Chatbot, AI Framework & MCP for WordPress11 CVEs Meow Gallery2 CVEs Code Engine – PHP Snippets, AI Functions & Automation for WordPress1 CVEs

All tigroumeow vulnerabilities

Frequently asked questions

Common questions about tigroumeow AI Engine vulnerabilities.

How many CVEs does tigroumeow AI Engine have?: tigroumeow AI Engine has 6 published CVE records since 2025.
How many tigroumeow AI Engine CVEs are in CISA KEV?: None of tigroumeow AI Engine's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for tigroumeow AI Engine vulnerabilities?: Yes — 1 of tigroumeow AI Engine's CVEs have a known public exploit.
Which versions of tigroumeow AI Engine are affected?: 5 distinct tigroumeow AI Engine versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in tigroumeow AI Engine CVEs?: tigroumeow AI Engine's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of tigroumeow AI Engine CVEs?: The average CVSS base score across tigroumeow AI Engine's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track tigroumeow AI Engine vulnerabilities

Monitor new tigroumeow AI Engine vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing