AI Engine EUVD-2026-63824

Exploitation requires WordPress to be configured in Multisite mode (a non-default deployment requiring explicit activation during WordPress setup or via wp-config.php); the AI Engine plugin must be installed, activated, and running a version between 2.8.0 and 3.6.0. The attacker must hold an authenticated Administrator role on at least one sub-site within the network-unauthenticated or lower-privileged users cannot exploit this vulnerability. Single-site WordPress installations are entirely unaffected. Limiting factors are: (1) Multisite is a non-default WordPress configuration; (2) the AI Engine plugin must be specifically installed; (3) authenticated sub-site Administrator access is required. The critical amplifier is that large Multisite networks routinely delegate sub-site Administrator roles to untrusted or semi-trusted parties.

The CVSS 3.1 vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H assigns the highest possible impact scores (C/I/A all High), reflecting the ability to fully compromise any account on the network. The PR:H designation correctly captures that a sub-site Administrator credential is required-this is not unauthenticated exploitation. However, in WordPress Multisite environments, the sub-site Administrator role is frequently delegated to third-party tenants, clients, or department users, making this a realistic threat rather than a theoretical one. The S:U (Unchanged) scope designation in the NVD-assigned vector is arguable: the exploit crosses the security authority boundary between sub-site and network levels, which the CVSS specification associates with Scope:Changed. No EPSS probability score was provided in the input data, limiting quantitative exploitation-likelihood assessment. POC availability via WPScan substantially reduces the skill threshold for exploitation. No KEV listing means active exploitation is not confirmed by CISA. The highest realistic risk is in large Multisite networks with many delegated sub-site admins-particularly managed hosting or SaaS-style WordPress deployments where administrators are untrusted parties.

An authenticated sub-site Administrator-such as a client or tenant on a managed WordPress Multisite hosting platform-sends a crafted HTTP request to an AI Engine user management endpoint, specifying the Network Administrator's user ID as the target. Because the plugin does not verify the requester's authority over that account, the operation succeeds, allowing the attacker to modify the Network Administrator's credentials or email, effectively taking full control of the entire network. With a publicly available POC from WPScan, this attack requires no specialized tooling beyond basic HTTP manipulation.