The AI Engine WordPress plugin versions prior to 3.6.6 do not properly restrict file path inputs before reading and forwarding file contents to an external service. This improper limitation of pathname (CWE-22) enables users with subscriber-level privileges to perform arbitrary file reads if a specific public API feature is enabled. Otherwise, administrators can exploit the vulnerability, and in multisite setups, non-super subsite administrators can access sensitive network-wide configuration data. No CVSS score or patch information is currently available.

The vulnerability allows unauthorized reading and exfiltration of arbitrary files from the server by low-privileged users under certain conditions, potentially exposing sensitive data and configuration secrets. In multisite WordPress environments, subsite administrators without super admin rights can access network-wide secrets, increasing the risk of broader compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, disable the non-default public API feature to prevent subscriber-level exploitation. Restrict administrative privileges carefully, especially in multisite environments, to limit exposure.