CVE-2024-29090 MEDIUM

CVE-2024-29090: WordPress AI Engine plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability

Vendor Jordy Meow

Product AI Engine: ChatGPT Chatbot

Weakness CWE-918 · SSRF

Published March 28, 2024

Last update April 28, 2026

View on NVD All CVEs

CVSS base score

6.8/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

What the vulnerability does

01Description

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.

Key dates

02Disclosure timeline

March 28, 2024 CVE published

April 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-29090

Related vulnerabilities

04Related CVE

CVE-2025-10735 Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery CVE-2026-31941 Server-Side Request Forgery (SSRF) in Chamilo LMS CVE-2025-5276 CVE-2025-22726 WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-26019 @langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation

Identifiers

CVE CVE-2024-29090

CWE CWE-918

CVSS 6.8 / MEDIUM

Affected versions

Vendor Jordy Meow

Product AI Engine: ChatGPT Chatbot

Affected ≥ n/a and ≤ 2.1.4