CVE-2026-111041
AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including content they are not permitted to edit.
| Vendor | unknown |
| Product | ai engine |
| Published | Oct 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown ai engine
Be the first to know when new unknown vulnerabilities affecting unknown ai engine are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / AI Engine
0 < 3.7.9
References
Credits
Karthik Ramakrishnan WPScan