AE
Product
AI Engine
14
CVEs
0
On KEV
8.1
Max CVSS
3
New 30D
Severity mix
Critical 0High 5Medium 9Low 0
Watch
Add AI Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16954 | 6.5 | Aug 6 | AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens Affected: before 3.6.4 |
| CVE-2026-12510 | 5.9 | Jul 16 | AI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOR Affected: before 3.5.5 |
| CVE-2026-75798 | 5.3 | Aug 26 | AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant Affected: 3.4.0 before 3.7.2 |
| CVE-2026-16955 | 5.0 | Aug 8 | AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription Affected: before 3.6.6 |
| CVE-2026-110982 | 4.9 | Oct 21 | AI Engine < 3.8.6 - Editor+ Arbitrary Post Title and Excerpt Update via update_post_title and update_post_excerpt Affected: before 3.8.6 |
| CVE-2026-111041 | 4.9 | Oct 18 | AI Engine < 3.7.9 - Editor+ Arbitrary Post Modification via update_media_metadata and approve_media Affected: before 3.7.9 |
| CVE-2026-110976 | 4.9 | Oct 18 | AI Engine < 3.7.9 - Editor+ Arbitrary Post Deletion via reject_media Affected: before 3.7.9 |
| CVE-2026-16953 | 4.8 | Aug 8 | AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session Cookie Affected: before 3.6.4 |
| CVE-2024-6723 | 4.7 | Sep 13 | AI Engine < 2.4.8 - Admin+ SQLi Affected: before 2.4.8 |
Showing 9