MEDIUM 5.3 NVD

CVE-2026-75798

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it h

The AI Engine WordPress plugin before 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors, allowing unauthenticated attackers to run AI queries of their own choosing against the site owner's configured provider account.

References

https://wpscan.com/vulnerability/a77168df-61b8-40df-95f5-e19cf6540ce5/

Published: 2026-08-26 · Source: NVD · Feed updated: 2026-08-26

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-26 via NVD.

vulnfeed aggregates 11364 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.