CVE-2026-110982
AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Editor role and above to modify arbitrary posts of any type, including content they cannot otherwise edit such as navigation menus, block templates, global styles and WooCommerce coupons.
| Vendor | unknown |
| Product | ai engine |
| Published | Oct 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown ai engine
Be the first to know when new unknown vulnerabilities affecting unknown ai engine are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / AI Engine
0 < 3.8.6
References
Credits
Anatoly Gorbounov (x1will) WPScan