← Database

CVE-2024-6723

MEDIUM CVSS: 4.7 Published: 2024-09-13 Modified: 2026-06-17

Description

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.

Affected Platforms

Meowapps Ai Engine

Weakness Type

CWE-89

References