CVE-2026-16955
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
The AI Engine WordPress plugin before version 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them. This requires a non-default public API feature to be enabled; otherwise the issue is reachable by an administrator, which on multisite allows a non-super subsite administrator to read network-shared configuration and secrets.
Risk Assessment
The vulnerability allows unauthorized reading of sensitive files such as configurations and secrets, potentially leading to data confidentiality breach and privilege escalation in multisite environments.
Recommendation
Update the plugin to version 3.6.6 or later, and consider disabling the public API feature if not essential.
Original NVD description (English source)
The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at subscriber level requires a non-default public API feature to be enabled; otherwise the same issue is reachable by an administrator, which on multisite allows a non-super subsite administrator to read the network-shared configuration and its secrets.