AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1593 searches this plugin appeared in over the last 90 days, 20 listed. 1527 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 48 days ago and the previous band took 17 months to cross, so the real count is still just under 100K.

1. ★★★★★ irynaka

   4mo ago

   The plugin works reliably and performs exactly as expected. Even the free version is enough to understand its capabilities and evaluate its overall logic before deciding whether to upgrade. One thing I would especially like to highlight is the responsiveness of the development team. Whenever I had questions or needed clarification, I received helpful replies very quickly. It’s great to see both a well-designed plugin and excellent support behind it. Highly recommended.

   Read on wp.org ↗
2. ★★★★★ richardvahrman

   5mo ago

   As a web development company, Brighton Web is always looking for ways to make specialist content more accessible and useful. AI Engine has given us a practical and flexible way to explore how AI can enhance WordPress sites without requiring us to build everything from scratch. We first used it while working on the extensive early music catalogue at Edition Zefiro, where we wanted visitors to be able to discover and explore content in more natural ways. The results have been encouraging enough that we are now planning similar AI-powered enhancements for Micron2, a food testing laboratory, and for artist Graham Dean’s website, where AI will help visitors engage with a large body of creative work. There is a learning curve, particularly around APIs, models and configuration, but that reflects the rapidly evolving AI landscape as much as the plugin itself. The documentation, community and pace of development have made it much easier to get up to speed. Overall, AI Engine feels like a platform rather than just a plugin. It provides the flexibility to experiment, learn and grow, and has become an important part of how we are approaching AI-enabled websites for our clients. This topic was modified 4 weeks ago by richardvahrman.

   Read on wp.org ↗
3. ★★★★★ dzmuser

   5mo ago

   Just started using AI Engine and it seems like this is a winner. Currently I am using it for “cleaning up” our site, sorting meta descriptions, removing all standard wordpress texts that is hidden, uptimizing header and footer, rewriting/uptimizing product pages. Looking forward to using it for much more – really an all in one sort of thing.

   Read on wp.org ↗
4. ★★★★★ Richard Hickman

   5mo ago

   I’m a complete AI novice. With help from Claude & Gemini, got a chatbot working fully GDPR compliant in a few hours

   Read on wp.org ↗
5. ★★★★★ Ware

   5mo ago

   Very useful plugin to elaborate standard Gutenberg blocks (translate, improve, change etc). I have not explored yet the other functionalities but it looks very promising.

   Read on wp.org ↗
6. ★★★★★ Katmarina

   5mo ago

   KAT Marina is a prominent yacht brokerage and management company based on the Costa Blanca in Spain, specializing in catamarans and motor yachts. The firm is an authorized dealership for the Beneteau group brands, Lagoon Catamarans and Jeanneau, providing tailored sales, concierge, and management services across offices in Alicante, Torrevieja, and Campello. KAT Marina provides a comprehensive suite of nautical services for boat owners and prospective buyers: Vessel Sales: Dealership for top multihull and monohull brands (Lagoon, Jeanneau), sailing yachts, motor yachts and motor boats. Yacht Management: Operational and crewed charter management to maximize the utility and return on vessels. Concierge & Wintering: Localized maintenance, delivery, and seasonal storage on the Spanish coast.

   Read on wp.org ↗
7. ★★★★★ deelau28

   5mo ago

   感謝開發者,令我慳翻好多時間

   Read on wp.org ↗
8. ★★★★★ Anonymous

   5mo ago

   I went to the Meow website for help setting up the Plugin. The chatbot on their site said version 3.5.4 was quite old. And I needed to upgrade. But according to WordPress, that is the latest version and it was updated 2 days ago. Needless to say, I have uninstalled it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.6.2 Fix: Fixed block editor paragraph spacing broken by the AI Copilot handler wrapper. Add: Note filtering support for the wp_get_comments MCP tool, allowing agents to read WordPress 6.9 editor Notes. Fix: Fixed the Anthrop 3.6.2
2. — Version 3.6.1 Fix: MCP user tools not enforcing proper capabilities, allowing Multisite site administrators to edit users beyond their reach. Hotfix. (Thanks to Charles Vosburgh for reporting.) Fix: MCP read tools corrupting block-JSO 3.6.1
3. — Version 3.6.0 Add: GPT-5.6 family (Sol, Terra, and Luna) to OpenAI models, with Sol marked as the latest. Fix: Gemini image models not being selectable when their ID lacks a -preview suffix. Fix: MCP media upload tool crashing on down 3.6.0
4. — Version 3.5.9 Fix: MCP post meta tools double-serializing array values, which stored nested arrays as strings. Fix: MCP wp_create_post and wp_update_post tools stripping shortcodes, email HTML, and inline CSS for admin-authorized call 3.5.9
5. — Version 3.5.8 Fix: Code blocks now display correctly in the Timeless and Foundation chatbot themes (was using proportional font instead of monospace). Fix: Sonnet 5 breaking with “each thinking block must contain thinking” when stream 3.5.8
6. — Version 3.5.7 Fix: Chroma “Pull All” now returns all pages of large collections instead of only the first page. Add: Claude Sonnet 5 model support. Fix: Anthropic function-calling loops no longer fail when no explicit max tokens is se 3.5.7

All 44 disclosed vulnerabilities are patched in the current version (3.9.0). Sites still on an older version should update.

1. Patched High · 7.5 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via Unauthenticated MCP OAuth Client Registration ↗
   2026-10-29 CVE-2026-110732 Missing Authorization Affects <= 3.8.6 Patched in 3.8.7
2. Patched Medium · 4.2 AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter ↗
   2026-10-27 CVE-2026-107745 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.8.4 Patched in 3.8.5
3. Patched Medium · 4.3 AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini <= 3.8.6 - Missing Authorization ↗
   2026-10-26 CVE-2026-112828 Missing Authorization Affects <= 3.8.6 Patched in 3.8.7
4. Patched Low · 2.7 AI Engine <= 3.8.5 - Missing Authorization ↗
   2026-10-19 CVE-2026-110982 Missing Authorization Affects <= 3.8.5 Patched in 3.8.6
5. Patched Low · 2.7 AI Engine <= 3.7.8 - Missing Authorization ↗
   2026-10-16 CVE-2026-110976 Missing Authorization Affects <= 3.7.8 Patched in 3.7.9
6. Patched Low · 2.7 AI Engine <= 3.7.8 - Missing Authorization ↗
   2026-10-16 CVE-2026-111041 Missing Authorization Affects <= 3.7.8 Patched in 3.7.9
7. Patched Medium · 4.3 AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini <= 3.8.3 - Missing Authorization ↗
   2026-10-15 CVE-2026-110888 Missing Authorization Affects <= 3.8.3 Patched in 3.8.4
8. Patched High · 7.2 AI Engine <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'model_' Parameter → PHP Error-Log Injection → Advisor Indirect Prompt Injection ↗
   2026-09-30 CVE-2026-96561 Improper Neutralization of Input During Web Page Generation Affects <= 3.8.0 Patched in 3.8.1
9. Patched Medium · 5.3 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.7.8 - Unauthenticated Insecure Direct Object Reference ↗
   2026-09-23 CVE-2026-93623 Authorization Bypass Through User-Controlled Key Affects <= 3.7.8 Patched in 3.7.9
10. Patched Medium · 6.5 AI Engine <= 3.7.7 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Attachment Disclosure via 'mediaId' Parameter ↗
    2026-09-14 CVE-2026-89141 Authorization Bypass Through User-Controlled Key Affects <= 3.7.7 Patched in 3.7.8
11. Patched Medium · 5.3 AI Engine – The Chatbot, AI Framework & MCP for WordPress 3.4.0 - 3.7.1 - Missing Authorization to Unauthenticated Arbitrary AI Query Execution ↗
    2026-08-28 CVE-2026-75798 Missing Authorization Affects 3.4.0 - 3.7.1 Patched in 3.7.2
12. Patched Medium · 6.5 AI Engine – The Chatbot, AI Framework & MCP for WordPress 3.3.3 - 3.7.1 - Authenticated (Subscriber+) Arbitrary File Read ↗
    2026-08-27 CVE-2026-75797 Improper Limitation of a Pathname to a Restricted Directory Affects 3.3.3 - 3.7.1 Patched in 3.7.2
13. Patched Medium · 4.7 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.0 - Authenticated (Administrator+) Privilege Escalation ↗
    2026-08-24 CVE-2026-75796 Improper Privilege Management Affects <= 3.6.0 Patched in 3.6.1
14. Patched Medium · 5.3 AI Engine <= 3.6.3 - Insecure Direct Object Reference to Unauthenticated Cross-Session Chatbot File Deletion ↗
    2026-08-03 CVE-2026-16953 Authorization Bypass Through User-Controlled Key Affects <= 3.6.3 Patched in 3.6.4
15. Patched Medium · 6.5 AI Engine <= 3.6.5 - Authenticated (Subscriber+) Arbitrary File Read ↗
    2026-08-03 CVE-2026-16955 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.6.5 Patched in 3.6.6
16. Patched High · 8.8 AI Engine <= 3.6.5 - Cross-Site Request Forgery to Privilege Escalation via REQUEST_URI Substring Match ↗
    2026-07-31 CVE-2026-15988 Cross-Site Request Forgery Affects <= 3.6.5 Patched in 3.6.6
17. Patched Low · 2.7 AI Engine <= 3.6.3 - Authenticated (Editor+) Information Exposure ↗
    2026-07-30 CVE-2026-16954 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.6.3 Patched in 3.6.4
18. Patched High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.6.8 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-28 CVE-2026-65545 Improper Neutralization of Input During Web Page Generation Affects <= 3.6.8 Patched in 3.6.9
19. Patched Medium · 4.3 AI Engine <= 3.5.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Chatbot Discussion Disclosure ↗
    2026-06-25 CVE-2026-12510 Authorization Bypass Through User-Controlled Key Affects <= 3.5.4 Patched in 3.5.5
20. Patched High · 7.2 AI Engine <= 3.5.4 - Authenticated (Editor+) Arbitrary File Write ↗
    2026-06-23 CVE-2026-12511 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.5.4 Patched in 3.5.5
21. Patched High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.4.9 - Authenticated (Editor+) Privilege Escalation ↗
    2026-05-28 CVE-2026-27407 Incorrect Privilege Assignment Affects <= 3.4.9 Patched in 3.5.0
22. Patched High · 8.8 AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token ↗
    2026-05-16 CVE-2026-8719 Improper Privilege Management Affects 3.4.9 Patched in 3.5.0
23. Patched High · 7.2 AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload ↗
    2026-02-25 CVE-2026-23802 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.2 Patched in 3.3.3
24. Patched High · 7.2 AI Engine <= 3.3.2 - Authenticated (Editor+) Arbitrary File Upload via 'filename' Parameter in update_media_metadata Endpoint ↗
    2026-01-27 CVE-2026-1400 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.2 Patched in 3.3.3
25. Patched Medium · 6.4 AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2026-01-27 CVE-2026-0746 Server-Side Request Forgery Affects <= 3.3.2 Patched in 3.3.3
26. Patched Medium · 6.8 AI Engine <= 3.1.8 - Authenticated (Editor+) Server-Side Request Forgery ↗
    2025-11-18 CVE-2025-8084 Server-Side Request Forgery Affects <= 3.1.8 Patched in 3.1.9
27. Patched High · 7.1 AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization ↗
    2025-11-12 CVE-2025-12844 Deserialization of Untrusted Data Affects <= 3.1.8 Patched in 3.1.9
28. Patched Critical · 9.8 AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation ↗
    2025-11-04 CVE-2025-11749 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.1.3 Patched in 3.1.4
29. Patched Medium · 6.5 Ai Engine <= 2.9.5 - Missing Authorization to Unauthenticated Uploaded Files Disclosure And Deletion ↗
    2025-09-03 CVE-2025-8268 Missing Authorization Affects <= 2.9.5 Patched in 2.9.6
30. Patched High · 8.8 AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2025-07-30 CVE-2025-7847 Unrestricted Upload of File with Dangerous Type Affects 2.9.3 - 2.9.4 Patched in 2.9.5
31. Patched Medium · 6.5 AI Engine <= 2.9.4 - Missing URL Scheme Validation to Authenticated (Subscriber+) Arbitrary File Read via simpleTranscribeAudio and get_audio Functions ↗
    2025-07-23 CVE-2025-7780 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.9.4 Patched in 2.9.5
32. Patched Medium · 5.4 AI Engine <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via `mwai_chatbot` Shortcode `id` Parameter ↗
    2025-07-07 CVE-2025-5570 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.4 Patched in 2.8.5
33. Patched High · 8.0 AI Engine 2.8.4 - Insecure OAuth Implementation ↗
    2025-07-03 CVE-2025-6238 URL Redirection to Untrusted Site Affects 2.8.4 Patched in 2.8.5
34. Patched High · 8.8 AI Engine 2.8.0 - 2.8.3 - Authenticated (Subscriber+) Insufficient Authorization to Privilege Escalation via MCP ↗
    2025-06-18 CVE-2025-5071 Incorrect Authorization Affects 2.8.0 - 2.8.3 Patched in 2.8.4
35. Patched Medium · 4.9 AI Engine <= 2.6.3 - Authenticated (Admin+) SQL Injection ↗
    2024-11-21 CVE-2024-10499 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.6.3 Patched in 2.6.5
36. Patched Medium · 4.9 AI Engine <= 2.4.7 - Authenticated (Admin+) SQL Injection ↗
    2024-08-22 CVE-2024-6723 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.7 Patched in 2.4.8
37. Patched High · 7.2 AI Engine <= 2.5.0 - Authenticated (Admin+) Remote Code Execution ↗
    2024-07-29 CVE-2024-6451 Improper Control of Generation of Code Affects <= 2.5.0 Patched in 2.5.1
38. Patched Medium · 6.4 AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2024-07-22 CVE-2024-38791 Server-Side Request Forgery Affects <= 2.4.7 Patched in 2.4.8
39. Patched Critical · 9.1 AI Engine: ChatGPT Chatbot <= 2.2.63 - Authenticated (Editor+) Arbitrary File Upload ↗
    2024-05-07 CVE-2024-34440 Unrestricted Upload of File with Dangerous Type Affects <= 2.2.63 Patched in 2.2.70
40. Patched Medium · 6.4 AI Engine <= 2.1.4 - Authenticated (Editor+) Server-Side Request Forgery ↗
    2024-03-26 CVE-2024-29090 Server-Side Request Forgery Affects <= 2.1.4 Patched in 2.1.5
41. Patched Medium · 6.5 AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-03-01 CVE-2024-0378 Improper Neutralization of Input During Web Page Generation Affects <= 2.2.0 Patched in 2.2.1
42. Patched Medium · 6.6 AI Engine <= 2.1.4 - Authenticated(Editor+) Arbitrary File Upload via add_image_from_url ↗
    2024-01-18 CVE-2024-0699 Unrestricted Upload of File with Dangerous Type Affects <= 2.1.4 Patched in 2.1.5
43. Patched Critical · 9.8 AI Engine: ChatGPT Chatbot <= 1.9.98 - Unauthenticated Arbitrary File Upload via rest_upload ↗
    2024-01-09 CVE-2023-51409 Unrestricted Upload of File with Dangerous Type Affects <= 1.9.98 Patched in 1.9.99
44. Patched Medium · 4.4 AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable <= 1.6.82 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-05-19 CVE-2023-2580 Improper Neutralization of Input During Web Page Generation Affects < 1.6.83 Patched in 1.6.83

Translated into 25 languages, 4 at 90% or more

Plus 1 more locale with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-09-16 100K+ → 90K+ down after 520 days in tier
2. 2025-04-14 90K+ → 100K+ up after 86 days in tier
3. 2025-01-18 80K+ → 90K+ up after 131 days in tier
4. 2024-09-09 70K+ → 80K+ up after 118 days in tier
5. 2024-05-14 60K+ → 70K+ up after 80 days in tier
6. 2024-02-24 50K+ → 60K+ up after 83 days in tier
7. 2023-12-03 40K+ → 50K+ up after 92 days in tier
8. 2023-09-02 30K+ → 40K+ up after 78 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini into a readme, a review or a deck. It updates itself.

AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini: 90K+ active installs, 4.9★ (874 reviews). Plugin Pulse (WP Mayor), as of 2026-11-03. https://plugins.wpmayor.com/plugin/ai-engine