Is there a public PoC exploit available for CVE-2026-12510?

Yes, a public proof-of-concept exploit is available for CVE-2026-12510. Prioritise patching immediately.

Is there a patch available for CVE-2026-12510?

Yes, a patch is available for CVE-2026-12510. Update the affected software to the latest version immediately.

Ai Engine CVE-2026-12510

EUVD-2026-44874

2026-07-16 WPScan

GHSA-8rhw-c8ph-cp97

WordPress Information Disclosure Ai Engine

Lifecycle Timeline

Patch available

Jul 16, 2026 - 10:18 EUVD

CVE Published

Jul 16, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The AI Engine WordPress plugin before 3.5.5 does not verify that a user owns the chatbot conversation referenced by a client-supplied identifier, allowing users with subscriber-level access to read other users' private conversations and take over their conversation records when the discussions feature is enabled.

Analysis

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ai Engine

View all

CVE-2023-51409 CRITICAL Emergency POC

10.0 Apr 12

Unrestricted file upload in Jordy Meow's AI Engine: ChatGPT Chatbot plugin for WordPress (versions up to and including 1

CVE-2026-12511 HIGH This Week POC

8.1 Jul 14

Arbitrary file write in the AI Engine WordPress plugin before 3.5.5 lets authenticated editor-level users abuse an unsan

CVE-2024-10499 HIGH This Week POC

7.2 Dec 12

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint b

CVE-2024-6451 HIGH This Week POC

7.2 Aug 19

AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. Rated high severity (CVSS 7.2), this

CVE-2024-29090 MEDIUM This Month POC

6.8 Mar 28

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated medium severity (CV

CVE-2024-34440 CRITICAL Act Now

9.1 May 14

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.2.63. Rated criti

CVE-2024-29100 CRITICAL Act Now

9.1 Mar 28

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated critic

CVE-2025-5071 HIGH This Week

8.8 Jun 19

The AI Engine WordPress plugin (versions 2.8.0-2.8.3) contains a missing capability check in the 'Meow_MWAI_Labs_MCP::ca

CVE-2023-2580 MEDIUM This Month POC

4.8 Jun 27

The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-p

CVE-2024-6723 MEDIUM This Month POC

4.7 Sep 13

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL s

CVE-2024-0699 MEDIUM This Month

6.6 Feb 05

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more!. Rated medium severity (CVSS 6.6), this vulnerability i

CVE-2025-6238 HIGH This Week

8.0 Jul 04

The AI Engine plugin for WordPress is vulnerable to open redirect in version 2.8.4. This is due to an insecure OAuth imp

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

CVE-2026-12510 vulnerability details – vuln.today

Back