CVE-2026-110888: WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability
Published Oct 15, 2026
·Updated
Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.3.
Affected Software
1 affected component
Meow Apps AI Engine<=3.8.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress AI Engine pluginto a version that resolves this vulnerability.Fixed in 3.8.4
Event History
Oct 15, 2026
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. It can be exploited remotely and does not require user interaction.
2
What security impact is indicated?
The reported impact is limited to integrity. No confidentiality or availability impact is indicated by the supplied severity vector.
3
Which versions are affected?
AI Engine versions through 3.8.3 are affected. The supplied data does not identify a fixed version.