WP Manifestindependent plugin directory
manifest / ai / super-ai-engine

Super AI Engine WP RegistryLow-severity findings · 1 findingOpen the reportA-

Super AI Engine is a WordPress Plugin to connect WordPress with AI. We believe in Democratize AI. With this plugin, Your site can now chat, write poetry, create contents, videos, audio, solve problems, and maybe make you coffee. Please make sure you read the [disclaimer](https://rithemes.com/super-ai-engine/disclaimer/). For more information, check the official website of [Super AI Engine](https://rithemes.com/wordpress-plugins/super-ai-engine/).

by Ri Themes · github.com/rajan-lama/super-ai-engine · website

★ 0stars
1.0.1latest · 11mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/rajan-lama/super-ai-engine/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Releases

2 releases.

Tag
Published
1.0.1 latest
Nov 26, 2025 11mo ago
1.0.0
Nov 21, 2025 11mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Super AI Engine 1.0.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.0.1
Findings
1
Worst severity
low
Content hash
2a080c5aeaa0806a9279f3d0…

Findings

  • low Unnecessary nopriv registration on admin AI handlers

    unnecessary_attack_surface

    wp_ajax_nopriv_sai_engine_generate, generate_content_options, and create_post are registered even though handlers require manage_options + nonce. Unauthenticated callers hit the endpoint and fail the cap check; remove nopriv hooks to shrink attack surface.

    admin/class-super-ai-engine-admin.php:66-73

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →