AE
Product
AI Engine
12
CVEs
0
On KEV
8.1
Max CVSS
3
New 30D
Severity mix
Critical 0High 4Medium 8Low 0
Watch
Add AI Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-12511 | 8.1 | Jul 14 | AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal Affected: before 3.5.5 |
| CVE-2026-75797 | 7.7 | Aug 26 | AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter Affected: 3.3.3 before 3.7.2 |
| CVE-2026-75796 | 7.2 | Aug 21 | AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools Affected: 2.8.0 before 3.6.1 |
| CVE-2024-10499 | 7.2 | Dec 12 | AI-Engine < 2.6.5 - Admin+ SQLi Affected: before 2.6.5 |
| CVE-2026-16954 | 6.5 | Aug 6 | AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens Affected: before 3.6.4 |
| CVE-2026-12510 | 5.9 | Jul 16 | AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR Affected: before 3.5.5 |
| CVE-2026-75798 | 5.3 | Aug 26 | AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant Affected: 3.4.0 before 3.7.2 |
| CVE-2026-16955 | 5.0 | Aug 8 | AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription Affected: before 3.6.6 |
| CVE-2026-110982 | 4.9 | Oct 21 | AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt Affected: before 3.8.6 |
| CVE-2026-111041 | 4.9 | Oct 18 | AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media Affected: before 3.7.9 |
| CVE-2026-110976 | 4.9 | Oct 18 | AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media Affected: before 3.7.9 |
| CVE-2026-16953 | 4.8 | Aug 8 | AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie Affected: before 3.6.4 |
Showing 12