Release v3.8.7
AI Engine Pro v3.8.7
Latest versionWhat's new in v3.8.7
AI Engine Pro v3.8.7 was released on . Unlock the full power of AI on your WordPress site. See the full changelog below and compare with the complete version history.
Release details
Released
2.3 MB
File available
Changelog
Fixed
- Security: Voice chatbots now only run functions attached to their own chatbot.
- Security: Editors on MCP can no longer publish other content types or file references through a decoy fields object, and Public API tools and MCP servers stay restricted to administrators.
- Security: Cross-Site requests are now matched on their real REST route, so other REST calls can no longer skip the nonce check by mimicking its URL.
- Security: Contributors can no longer take over a live chatbot through WordPress' embed preview, and outside post content a shortcode can no longer replace a live chatbot's prompt, model or API key.
- Security: The Gemini file upload now verifies TLS.
- Security: The MCP sign-in page can no longer be framed by another site, shows where the app sends you, and warns when an app calls itself Claude or ChatGPT without being it.
- Insights logs work again on sites whose logs table predates 2.5.6, since tables now get their missing columns on update.
- Chatbots and forms no longer stay blank when one of their settings contains entity text like ".
- Posts containing an escaped "<" (like "<48 dB") no longer lose everything after it in Knowledge and Content-Aware.
- AI Forms in chatbot mode now use the chatbot's own Max Tokens, model and temperature instead of hidden form values that cut replies at 4096 tokens.
- Messages, uploads, stopping a reply and loading a conversation now follow the right chatbot's discussion when a chat id belongs to another chatbot.
- Claude no longer rejects the answer after a function call when Knowledge is on (Invalid signature in thinking block).
- When a thinking model spends its whole Max Tokens reasoning, the reply now says so instead of showing the raw reasoning as the answer.
- Knowledge no longer retries rows of deleted environments, and large OpenAI Vector Stores sync page by page instead of timing out.
- MCP connections no longer drop when a client revokes the token it just replaced after a refresh, and sign-in responses say which site answered.
- Links in the GDPR consent text are now clickable instead of shown as raw text.
- The site-wide popup chatbot no longer leaves a screen of blank space at the bottom of the page on themes that give the body a height.
- The user's IP is shown again under their name in Discussions and Insights for logged-in users, and in the discussion details.
- Chatbot names with & no longer show &.
- Admin screens no longer load blank, and the header now shows the Free and Pro tiles.
- Links on other plugins' screens are no longer tagged as AI Engine traffic.
- OVHcloud and Sakana AI now follow one rule: hidden until switched on with MWAI_OVH or MWAI_SAKANA, and always shown where an environment of that type exist
Added
- Explore AI Engine, a ten-goal tour from the dashboard that follows you as a slim bar onto each screen, with Knowledge guidance in the chatbot settings.
- Workspace mobile app on the dashboard, with QR code, store links and a status line once a phone is paired.
- Sakana AI (Fugu and Namazu) as a native provider, hidden until switched on with MWAI_SAKANA.
- Read-only access for Claude and ChatGPT MCP connections, with a switch per connection in Connected Apps.
- Clean Up button in Knowledge for rows of deleted environments and orphans.
- The mwai_openai_body filter, to set any OpenAI parameter AI Engine leaves to the defaults, like high quality for the chatbot's image tool.
Improved
- Redesigned the dashboard with a Your AI card for models and providers, a This week chart compared with last week, shuffleable idea tiles and per-company AI visibility bars.
- Glass now takes its colors from the lights you pick for the visitor's bubbles, the launcher and the accent, and the theme editor preview opens with a sample conversation that is never saved or sent to the AI.
- New popup chatbots now open in the macOS frame and header, while existing chatbots keep the frame they already have.
- The MCP screen now shows how many tools each set brings and how many AI Engine has in all.
- MCP deletes without force now always go to the trash (products, events, media and comments too) or refuse clearly, and deletes that would be permanent ask the AI to check with the user first.
- The Settings screen, dashboard cards and feature showcase are now translatable, and Knowledge, Privacy First and Content Studio wording is clearer.
- Every Pro link in the admin now points to the AI Engine page and is tagged, Pro-locked buttons open it instead of doing nothing, and Pro chatbot modes show their Pro pill for free users.
- The License tab was redesigned, with an Activate your license link for Pro buyers who have not entered a key yet.
- The Pro update check now reports whether MCP was used in the last 30 days and how many phones are paired.
- The chatbot preview in the admin now keeps its own history, and the dashboard uses the same spacing as the other tabs.
Compatibility
- Requires WordPress
- 6.0
- Tested up to
- 7.1
- Requires PHP
- 8.1
Verified safe
AI Engine Pro v3.8.7 scanned clean with no security threats detected.
View full scan report