Unknown AI Engine vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 202611

Newest CVEs

• CVE-2026-110982

  AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt

  Unknown · AI Engine

  Medium4.9
• CVE-2026-111041

  AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media

  Unknown · AI Engine

  Medium4.9
• CVE-2026-110976

  AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media

  Unknown · AI Engine

  Medium4.9
• CVE-2026-75798

  AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant

  Unknown · AI Engine

  Medium5.3
• CVE-2026-75797

  AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter

  Unknown · AI Engine

  High7.7
• CVE-2026-75796

  AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools

  Unknown · AI Engine

  High7.2
• CVE-2026-16955

  AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription

  Unknown · AI Engine

  Medium5.0
• CVE-2026-16953

  AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie

  Unknown · AI Engine

  Medium4.8
• CVE-2026-16954

  AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens

  Unknown · AI Engine

  Medium6.5
• CVE-2026-12510

  AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR

  Unknown · AI Engine

  Medium5.9