CVE-2026-112828: WordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerability
Published Oct 26, 2026
·Updated
Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.6.
Affected Software
1 affected component
Meow Apps AI Engine<=3.8.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress AI Engine pluginto a version that resolves this vulnerability.Fixed in 3.8.7
Event History
Oct 26, 2026
CVE Published
via MITRE·08:45 AM
Data Sourced
via MITRE·08:45 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that an attacker needs low-level privileges. The issue is remotely reachable, requires no user interaction, and has low attack complexity.
2
What impact does successful exploitation have?
The reported impact is limited to integrity. The CVSS vector indicates no confidentiality or availability impact.
3
Which versions are affected?
AI Engine versions through 3.8.6 are affected. The supplied information does not identify a fixed version.