Overview
A critical vulnerability has been identified in the AI Engine plugin for WordPress that poses a severe security risk to users. This vulnerability, classified as CVE-2025-6238, affects version 2.8.4 of the plugin and enables unauthenticated attackers to exploit an open redirect flaw. This issue is particularly concerning as it potentially allows attackers to compromise systems and leak data by intercepting authorization codes and obtaining access tokens.
Vulnerability Summary
CVE ID: CVE-2025-6238
Severity: High (8.0 CVSS)
Attack Vector: Network
Privileges Required: None
User Interaction: Required
Impact: System compromise, Data leakage
Affected Products
A new way to communicate
Ameeba Chat is built on encrypted identity, not personal profiles.
Message, call, share files, and coordinate with identities kept separate.
- • Encrypted identity
- • Ameeba Chat authenticates access
- • Aliases and categories
- • End-to-end encrypted chat, calls, and files
- • Secure notes for sensitive information
Private communication, rethought.
Product | Affected Versions
AI Engine Plugin for WordPress | 2.8.4
How the Exploit Works
The vulnerability arises from an insecure OAuth implementation in the AI Engine plugin for WordPress. Specifically, the ‘redirect_uri’ parameter lacks validation during the authorization flow. This flaw allows unauthenticated attackers to manipulate the ‘redirect_uri’ parameter to point to an attacker-controlled URI. As a result, attackers can intercept the authorization code and obtain an access token, allowing them potential access to the system or the capability to leak data.
Conceptual Example Code
Below is a conceptual example of how the vulnerability might be exploited using an HTTP request:
GET /oauth2/authorize?response_type=code&client_id=CLIENT_ID&redirect_uri=https://attacker.com HTTP/1.1
Host: vulnerable-wordpress-site.comIn this example, the attacker modifies the ‘redirect_uri’ parameter to redirect the user to ‘attacker.com’ instead of a legitimate URI. This allows the attacker to potentially intercept the authorization code and gain unauthorized access.
Mitigation and Remediation
To mitigate this vulnerability, users are advised to update the AI Engine plugin for WordPress to the patched version 2.8.5, where the OAuth is disabled, and the insecure ‘Meow_MWAI_Labs_OAuth’ class is not loaded. In situations where an immediate update is not possible, using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary protection by blocking malicious redirects. As always, users should stay vigilant and ensure they use trusted networks while accessing their WordPress sites.