CVE-2026-16955
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The AI Engine WordPress plugin before version 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them. This requires a non-default public API feature to be enabled; otherwise the issue is reachable by an administrator, which on multisite allows a non-super subsite administrator to read network-shared configuration and secrets.
Risk Assessment
The vulnerability allows unauthorized reading of sensitive files such as configurations and secrets, potentially leading to data confidentiality breach and privilege escalation in multisite environments.
Recommendation
Update the plugin to version 3.6.6 or later, and consider disabling the public API feature if not essential.
Other vulnerabilities in AI Engine
See all- CVE-2026-93623Medium
The AI Engine plugin in versions up to 3.7.8 contains an Insecure Direct Object References (IDOR) vulnerability that allows an unauthenticated attacker to access objects they should not have permission to. The lack of authentication on object references enables manipulation of identifiers to gain unauthorized access.
- CVE-2026-75798Medium
The AI Engine WordPress plugin before version 3.7.2 does not perform an authorisation check on one of its administration-only features, relying instead on a token it hands out to anonymous visitors. This allows unauthenticated attackers to run AI queries of their own choosing against the site owner's configured provider account.
- CVE-2026-65545High
Unauthenticated Cross Site Scripting (XSS) vulnerability in AI Engine plugin up to version 3.6.8. An unauthenticated attacker can inject malicious scripts.
- CVE-2026-12510Medium
The AI Engine WordPress plugin before version 3.5.5 does not verify that a user owns the chatbot conversation referenced by a client-supplied identifier, allowing users with subscriber-level access to read other users' private conversations and take over their conversation records when the discussions feature is enabled.
- CVE-2026-27407High
AI Engine versions up to 3.4.9 have a vulnerability that allows for editor privilege escalation.
Original NVD description (English source)
The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at subscriber level requires a non-default public API feature to be enabled; otherwise the same issue is reachable by an administrator, which on multisite allows a non-super subsite administrator to read the network-shared configuration and its secrets.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS