AI Engine: ChatGPT Chatbot

2.9.4 Authenticated (Subscriber+) Arbitrary File Upload 2.9.3-2.9.4

Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions vulnerability <= 2.9.4

Authenticated (Subscriber+) Stored CrossSite Scripting via `mwai_chatbot` Shortcode `id` Parameter vulnerability <= 2.8.4

Insecure OAuth Implementation vulnerability <= 2.8.4

Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP vulnerability <= 2.8.3