Skip to main content

AI Engine CVE-2026-16954

| EUVDEUVD-2026-53726 MEDIUM
Information Exposure (CWE-200)
2026-08-06 WPScan GHSA-9wjr-j39x-f62m
WordPress Information Disclosure Ai Engine
6.5
CVSS 3.1 · Vendor: WPScan
Share

Severity by source

Vendor (WPScan) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
vuln.today AI
6.5 MEDIUM

Editor-role authentication required drives PR:L; full API key exposure in cleartext justifies C:H; no integrity or availability impact applies to this read-only disclosure.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

4
Analysis Generated
Aug 06, 2026 - 16:21 vuln.today
Patch available
Aug 06, 2026 - 07:02 EUVD
CVE Published
Aug 06, 2026 - 06:00 cve.org
UNKNOWN (no severity yet)
CVE Published
Aug 06, 2026 - 06:00 cve.org
MEDIUM 6.5

DescriptionCVE.org

The AI Engine WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being restricted to administrators everywhere else.

AnalysisAI

Cleartext exposure of third-party API keys and authentication tokens in AI Engine WordPress plugin (before 3.6.4) allows Editor-role users to read secrets that are intended to be administrator-only. The plugin inlines sensitive configuration values into admin page JavaScript without redaction, making them readable to any authenticated user with Editor access who inspects the page source. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain WordPress Editor credentials
Delivery
Authenticate to WordPress admin panel
Exploit
Navigate to AI Engine configuration admin page
Execution
Inspect inline page JavaScript source
Persist
Extract third-party API keys and tokens in cleartext
Impact
Abuse exfiltrated credentials against AI provider
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid WordPress user account with at minimum the Editor role - unauthenticated remote attackers cannot exploit this vulnerability. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) scores 6.5 (Medium), accurately reflecting network-accessible exploitation requiring only Editor-level credentials with no additional complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with a legitimate WordPress Editor account - obtained via credential compromise, insider access, or social engineering - logs into the admin panel and navigates to the AI Engine configuration page. Without any special tooling, they view the page source or browser developer tools to locate the inline JavaScript block containing the plugin's configuration, where API keys and authentication tokens appear in cleartext. …
Remediation Update AI Engine to version 3.6.4 or later, which redacts sensitive configuration values before they are rendered into admin page inline scripts. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Ai Engine

View all
CVE-2023-51409 CRITICAL POC
10.0 Apr 12

Unrestricted file upload in Jordy Meow's AI Engine: ChatGPT Chatbot plugin for WordPress (versions up to and including 1
CVE-2026-12511 HIGH POC
8.1 Jul 14

Arbitrary file write in the AI Engine WordPress plugin before 3.5.5 lets authenticated editor-level users abuse an unsan
CVE-2026-75797 HIGH POC
7.7 Aug 26

Path traversal in the AI Engine WordPress plugin (versions 3.3.3 through 3.7.1) allows arbitrary server file reads with

CVE-2026-75796 HIGH POC
7.2 Aug 21

Privilege escalation in the AI Engine WordPress plugin (versions 2.8.0 through 3.6.0) enables any sub-site Administrator
CVE-2024-10499 HIGH POC
7.2 Dec 12

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint b
CVE-2024-6451 HIGH POC
7.2 Aug 19

AI Engine < 2.4.3 is susceptible to remote-code-execution (RCE) via Log Poisoning. Rated high severity (CVSS 7.2), this

CVE-2024-29090 MEDIUM POC
6.8 Mar 28

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated medium severity (CV
CVE-2026-12510 MEDIUM POC
5.9 Jul 16

Unauthorized access to private chatbot conversations in the AI Engine WordPress plugin before 3.5.5 allows any authentic
CVE-2026-75798 MEDIUM POC
5.3 Aug 26

Unauthenticated remote attackers can invoke AI queries against a site owner's configured provider account through the AI
CVE-2024-34440 CRITICAL
9.1 May 14

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.2.63. Rated criti
CVE-2024-29100 CRITICAL
9.1 Mar 28

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.1.4. Rated critic
CVE-2026-16955 MEDIUM POC
5.0 Aug 08

Path traversal in the AI Engine WordPress plugin before 3.6.6 allows server-side file contents to be read and exfiltrate

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-16954 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy