Critical CVE-2025-11749 Flaw in AI Engine Plugin Exposes WordPress Sites to Full Compromise

Researchers at Wordfence have disclosed a critical vulnerability, CVE-2025-11749 (CVSS 9.8), in the AI Engine WordPress plugin that could allow unauthenticated attackers to escalate privileges and take full control of affected sites. The flaw affects all versions up to and including 3.1.3, with a patch available in version 3.1.4. according to Wordfence, the vulnerability stems from how the plugin registers REST API routes, which can expose a bearer token when the No-Auth URL feature in MCP settings is enabled.

Once an attacker obtains the token, they can authenticate with the MCP endpoint and issue privileged commands such as wp_update_user, potentially updating their own role to administrator. The company notes that exploitation is possible only if No-Auth URL is enabled, but warned that administrators may enable it inadvertently during testing or API integration.

Wordfence reported six exploitation attempts had already been detected and blocked within the first 24 hours of disclosure, and the vulnerability was reported by security researcher Emiliano Versini through the Wordfence Bug Bounty Program, who received a $2,145 bounty.