CVE-2025-11749

The AI Engine plugin for WordPress, in all versions up to and including 3.1.3, exposes its 'Bearer Token' value via the /mcp/v1/ REST API endpoint whenever the 'No-Auth URL' option is enabled (CWE-200). Because the endpoint is unauthenticated, any remote attacker can query it and read the bearer token directly from the response. With that token, the attacker can gain access to a valid authenticated session and perform many actions on the site, including creating a new administrator account, leading to full privilege escalation. Any WordPress site running AI Engine 3.1.3 or earlier with 'No-Auth URL' enabled is affected. No public proof-of-concept is known and the flaw is not yet in CISA KEV, but the very high EPSS score of 74.8% (99th percentile) indicates a strong likelihood of exploitation within 30 days.

What to do: Update the AI Engine plugin to a patched release newer than 3.1.3 as soon as possible. Until patched, disable the 'No-Auth URL' option or restrict access to the /mcp/v1/ endpoint (e.g., via WAF/rewrite rules), rotate the exposed bearer token, and review the site for any administrator accounts created without authorization.