AI Engine – The Chatbot, AI Framework & MCP for WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ irynaka

   2mo ago

   The plugin works reliably and performs exactly as expected. Even the free version is enough to understand its capabilities and evaluate its overall logic before deciding whether to upgrade. One thing I would especially like to highlight is the responsiveness of the development team. Whenever I had questions or needed clarification, I received helpful replies very quickly. It’s great to see both a well-designed plugin and excellent support behind it. Highly recommended.

   Read on wp.org ↗
2. ★★★★★ richardvahrman

   2mo ago

   As a web development company, Brighton Web is always looking for ways to make specialist content more accessible and useful. AI Engine has given us a practical and flexible way to explore how AI can enhance WordPress sites without requiring us to build everything from scratch. We first used it while working on the extensive early music catalogue at Edition Zefiro, where we wanted visitors to be able to discover and explore content in more natural ways. The results have been encouraging enough that we are now planning similar AI-powered enhancements for Micron2, a food testing laboratory, and for artist Graham Dean’s website, where AI will help visitors engage with a large body of creative work. There is a learning curve, particularly around APIs, models and configuration, but that reflects the rapidly evolving AI landscape as much as the plugin itself. The documentation, community and pace of development have made it much easier to get up to speed. Overall, AI Engine feels like a platform rather than just a plugin. It provides the flexibility to experiment, learn and grow, and has become an important part of how we are approaching AI-enabled websites for our clients. This topic was modified 4 weeks ago by richardvahrman.

   Read on wp.org ↗
3. ★★★★★ dzmuser

   2mo ago

   Just started using AI Engine and it seems like this is a winner. Currently I am using it for “cleaning up” our site, sorting meta descriptions, removing all standard wordpress texts that is hidden, uptimizing header and footer, rewriting/uptimizing product pages. Looking forward to using it for much more – really an all in one sort of thing.

   Read on wp.org ↗
4. ★★★★★ Richard Hickman

   2mo ago

   I’m a complete AI novice. With help from Claude & Gemini, got a chatbot working fully GDPR compliant in a few hours

   Read on wp.org ↗
5. ★★★★★ Ware

   2mo ago

   Very useful plugin to elaborate standard Gutenberg blocks (translate, improve, change etc). I have not explored yet the other functionalities but it looks very promising.

   Read on wp.org ↗
6. ★★★★★ Katmarina

   2mo ago

   KAT Marina is a prominent yacht brokerage and management company based on the Costa Blanca in Spain, specializing in catamarans and motor yachts. The firm is an authorized dealership for the Beneteau group brands, Lagoon Catamarans and Jeanneau, providing tailored sales, concierge, and management services across offices in Alicante, Torrevieja, and Campello. KAT Marina provides a comprehensive suite of nautical services for boat owners and prospective buyers: Vessel Sales: Dealership for top multihull and monohull brands (Lagoon, Jeanneau), sailing yachts, motor yachts and motor boats. Yacht Management: Operational and crewed charter management to maximize the utility and return on vessels. Concierge & Wintering: Localized maintenance, delivery, and seasonal storage on the Spanish coast.

   Read on wp.org ↗
7. ★★★★★ deelau28

   2mo ago

   感謝開發者,令我慳翻好多時間

   Read on wp.org ↗
8. ★★★★★ Anonymous

   2mo ago

   I went to the Meow website for help setting up the Plugin. The chatbot on their site said version 3.5.4 was quite old. And I needed to upgrade. But according to WordPress, that is the latest version and it was updated 2 days ago. Needless to say, I have uninstalled it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.6.2 Fix: Fixed block editor paragraph spacing broken by the AI Copilot handler wrapper. Add: Note filtering support for the wp_get_comments MCP tool, allowing agents to read WordPress 6.9 editor Notes. Fix: Fixed the Anthrop 3.6.2
2. — Version 3.6.1 Fix: MCP user tools not enforcing proper capabilities, allowing Multisite site administrators to edit users beyond their reach. Hotfix. (Thanks to Charles Vosburgh for reporting.) Fix: MCP read tools corrupting block-JSO 3.6.1
3. — Version 3.6.0 Add: GPT-5.6 family (Sol, Terra, and Luna) to OpenAI models, with Sol marked as the latest. Fix: Gemini image models not being selectable when their ID lacks a -preview suffix. Fix: MCP media upload tool crashing on down 3.6.0
4. — Version 3.5.9 Fix: MCP post meta tools double-serializing array values, which stored nested arrays as strings. Fix: MCP wp_create_post and wp_update_post tools stripping shortcodes, email HTML, and inline CSS for admin-authorized call 3.5.9
5. — Version 3.5.8 Fix: Code blocks now display correctly in the Timeless and Foundation chatbot themes (was using proportional font instead of monospace). Fix: Sonnet 5 breaking with “each thinking block must contain thinking” when stream 3.5.8
6. — Version 3.5.7 Fix: Chroma “Pull All” now returns all pages of large collections instead of only the first page. Add: Claude Sonnet 5 model support. Fix: Anthropic function-calling loops no longer fail when no explicit max tokens is se 3.5.7

32 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.7 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.0 - Authenticated (Administrator+) Privilege Escalation ↗
   2026-08-24 CVE-2026-75796 Improper Privilege Management Affects <= 3.6.0 Patched in 3.6.1
2. Medium · 5.3 AI Engine <= 3.6.3 - Insecure Direct Object Reference to Unauthenticated Cross-Session Chatbot File Deletion ↗
   2026-08-03 CVE-2026-16953 Authorization Bypass Through User-Controlled Key Affects <= 3.6.3 Patched in 3.6.4
3. Medium · 6.5 AI Engine <= 3.6.5 - Authenticated (Subscriber+) Arbitrary File Read ↗
   2026-08-03 CVE-2026-16955 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.6.5 Patched in 3.6.6
4. High · 8.8 AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match ↗
   2026-07-31 CVE-2026-15988 Cross-Site Request Forgery (CSRF) Affects <= 3.6.5 Patched in 3.6.6
5. Low · 2.7 AI Engine <= 3.6.3 - Authenticated (Editor+) Information Exposure ↗
   2026-07-30 CVE-2026-16954 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.6.3 Patched in 3.6.4
6. High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-28 CVE-2026-65545 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.8 Patched in 3.6.9
7. Medium · 4.3 AI Engine <= 3.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure ↗
   2026-06-25 CVE-2026-12510 Authorization Bypass Through User-Controlled Key Affects <= 3.5.4 Patched in 3.5.5
8. High · 7.2 AI Engine <= 3.5.4 - Authenticated (Editor+) Arbitrary File Write ↗
   2026-06-23 CVE-2026-12511 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.5.4 Patched in 3.5.5
9. High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.4.9 - Authenticated (Editor+) Privilege Escalation ↗
   2026-05-28 CVE-2026-27407 Incorrect Privilege Assignment Affects <= 3.4.9 Patched in 3.5.0
10. High · 8.8 AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token ↗
    2026-05-16 CVE-2026-8719 Improper Privilege Management Affects 3.4.9 Patched in 3.5.0
11. High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload ↗
    2026-02-25 CVE-2026-23802 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.2 Patched in 3.3.3
12. High · 7.2 AI Engine <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpoint ↗
    2026-01-27 CVE-2026-1400 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.2 Patched in 3.3.3
13. Medium · 6.4 AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2026-01-27 CVE-2026-0746 Server-Side Request Forgery (SSRF) Affects <= 3.3.2 Patched in 3.3.3
14. Medium · 6.8 AI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgery ↗
    2025-11-18 CVE-2025-8084 Server-Side Request Forgery (SSRF) Affects <= 3.1.8 Patched in 3.1.9
15. High · 7.1 AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization ↗
    2025-11-12 CVE-2025-12844 Deserialization of Untrusted Data Affects <= 3.1.8 Patched in 3.1.9
16. Critical · 9.8 AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ↗
    2025-11-04 CVE-2025-11749 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.1.3 Patched in 3.1.4
17. Medium · 6.5 Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion ↗
    2025-09-03 CVE-2025-8268 Missing Authorization Affects <= 2.9.5 Patched in 2.9.6
18. High · 8.8 AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2025-07-30 CVE-2025-7847 Unrestricted Upload of File with Dangerous Type Affects 2.9.3 - 2.9.4 Patched in 2.9.5
19. Medium · 6.5 AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions ↗
    2025-07-23 CVE-2025-7780 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.9.4 Patched in 2.9.5
20. Medium · 5.4 AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter ↗
    2025-07-07 CVE-2025-5570 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.4 Patched in 2.8.5
21. High · 8.0 AI Engine 2.8.4 - Insecure OAuth Implementation ↗
    2025-07-03 CVE-2025-6238 URL Redirection to Untrusted Site ('Open Redirect') Affects 2.8.4 Patched in 2.8.5
22. High · 8.8 AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP ↗
    2025-06-18 CVE-2025-5071 Incorrect Authorization Affects 2.8.0 - 2.8.3 Patched in 2.8.4
23. Medium · 4.9 AI Engine <= 2.6.3 - Authenticated (Admin+) SQL Injection ↗
    2024-11-21 CVE-2024-10499 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.6.3 Patched in 2.6.5
24. Medium · 4.9 AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection ↗
    2024-08-22 CVE-2024-6723 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.4.7 Patched in 2.4.8
25. High · 7.2 AI Engine <= 2.5.0 - Authenticated (Admin+) Remote Code Execution ↗
    2024-07-29 CVE-2024-6451 Improper Control of Generation of Code ('Code Injection') Affects <= 2.5.0 Patched in 2.5.1
26. Medium · 6.4 AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2024-07-22 CVE-2024-38791 Server-Side Request Forgery (SSRF) Affects <= 2.4.7 Patched in 2.4.8
27. Critical · 9.1 AI Engine: ChatGPT Chatbot <= 2.2.63 - Authenticated (Editor+) Arbitrary File Upload ↗
    2024-05-07 CVE-2024-34440 Unrestricted Upload of File with Dangerous Type Affects <= 2.2.63 Patched in 2.2.70
28. Medium · 6.4 AI Engine <= 2.1.4 - Authenticated (Editor+) Server-Side Request Forgery ↗
    2024-03-26 CVE-2024-29090 Server-Side Request Forgery (SSRF) Affects <= 2.1.4 Patched in 2.1.5
29. Medium · 6.5 AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-03-01 CVE-2024-0378 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.0 Patched in 2.2.1
30. Medium · 6.6 AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url ↗
    2024-01-18 CVE-2024-0699 Unrestricted Upload of File with Dangerous Type Affects <= 2.1.4 Patched in 2.1.5
31. Critical · 9.8 AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload ↗
    2024-01-09 CVE-2023-51409 Unrestricted Upload of File with Dangerous Type Affects <= 1.9.98 Patched in 1.9.99
32. Medium · 4.4 AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-05-19 CVE-2023-2580 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.6.83 Patched in 1.6.83

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 23 languages, 4 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-04-14 90K+ → 100K+ up after 86 days in tier
2. 2025-01-18 80K+ → 90K+ up after 131 days in tier
3. 2024-09-09 70K+ → 80K+ up after 118 days in tier
4. 2024-05-14 60K+ → 70K+ up after 80 days in tier
5. 2024-02-24 50K+ → 60K+ up after 83 days in tier
6. 2023-12-03 40K+ → 50K+ up after 92 days in tier
7. 2023-09-02 30K+ → 40K+ up after 78 days in tier
8. 2023-06-16 20K+ → 30K+ up after 49 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation 1K+ installs · 4.0★ · 4 shared tags B
• Aimogen – AI Content Writer, Chatbot, Editor and AI Automation for WordPress 400+ installs · 4.1★ · 4 shared tags A
• AI ChatBot with ChatGPT and Content Generator by AYS 300+ installs · 4.4★ · 4 shared tags A
• AI Provider for OpenAI 40K+ installs · 3.6★ · 3 shared tags B
• AI Puffer – Chat. Create. Automate. (formerly AI Power) 10K+ installs · 4.5★ · 3 shared tags A
• VigIA – AI Visibility, Analytics & Control 1K+ installs · 4.6★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for AI Engine – The Chatbot, AI Framework & MCP for WordPress into a readme, a review or a deck. It updates itself.

AI Engine – The Chatbot, AI Framework & MCP for WordPress: 100K+ active installs, 4.9★ (860 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ai-engine