CVE-2026-39506

MediumCVSS 4.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

The AI Engine (Pro) plugin for WordPress lacks authorization, allowing an attacker to exploit incorrectly configured access control security levels.

Risk Assessment

Risk of unauthorized access to administrative functions or data, potentially leading to privilege escalation.

Recommendation

Update the AI Engine (Pro) plugin to version 3.4.2 or later.

Original NVD description (English source)

Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine (Pro): from n/a through < 3.4.2.