Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2023-51409 — AI Deep Analysis Summary

CVSS 10.0 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Critical **Arbitrary File Upload** flaw in the 'rest_upload' function.…

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-434** (Unrestricted Upload of File with Dangerous Type). <br>🔍 **Flaw**: Missing file type validation in the `rest_upload` function allows dangerous file extensions to bypass security checks.

Q3Who is affected? (Versions/Components)

📦 **Affected Product**: **AI Engine: ChatGPT Chatbot** by Jordy Meow. <br>📉 **Versions**: All versions **<= 1.9.98**. <br>🌐 **Platform**: WordPress sites running this specific plugin.

Q4What can hackers do? (Privileges/Data)

🕵️ **Attacker Actions**: Upload arbitrary files (backdoors/webshells). <br>🔓 **Privileges**: **Unauthenticated** access required. <br>💾 **Impact**: Full **Remote Code Execution (RCE)**, data theft, and server takeover.

Q5Is exploitation threshold high? (Auth/Config)

📉 **Threshold**: **LOW**. <br>🔑 **Auth**: **Unauthenticated** (No login needed). <br>⚙️ **Config**: Exploits via standard REST API endpoint `rest_upload`. Easy to trigger.

Q6Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploits**: **YES**. <br>🔗 Multiple PoCs available on GitHub (e.g., RandomRobbieBF, JoshuaProvoste). <br>⚡ **0-Click RCE**: Some exploits allow immediate RCE without interaction. Nuclei templates also exist.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1. Scan for plugin version **<= 1.9.98**. <br>2. Use Nuclei templates (`CVE-2023-51409.yaml`). <br>3. Check for unauthenticated access to `/wp-json/ai-engine/v1/rest_upload`.

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Fix**: Update plugin to version **> 1.9.98**. <br>📢 **Official Patch**: Vendor (Jordy Meow) released fixes. PatchStack database confirms the vulnerability entry.

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: <br>1. **Disable** the plugin immediately. <br>2. Block access to `/wp-json/ai-engine/` via WAF. <br>3. Restrict file upload permissions on the server.

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL**. <br>⏱️ **Priority**: **IMMEDIATE ACTION**. <br>📢 High CVSS (9.8) + Public Exploits + Unauthenticated = High risk of active exploitation. Patch now!