CVE-2026-65545: WordPress AI Engine plugin <= 3.6.8 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.

Affected Software

1 affected component

WordPress AI Engine plugin<=3.6.8

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress AI Engine plugin to a version that resolves this vulnerability.
Fixed in 3.6.9
Compensating control
Ensure the WordPress AI Engine plugin is updated so that versions <= 3.6.8 (containing the Cross Site Scripting vulnerability) are not used.

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-65545 is rated high with a score of 7.1.

To fix CVE-2026-65545, update the WordPress AI Engine plugin to version 3.6.9 or later.

CVE-2026-65545 is an unauthenticated Cross Site Scripting (XSS) vulnerability.

CVE-2026-65545 affects the WordPress AI Engine plugin versions 3.6.8 and earlier.

Yes, CVE-2026-65545 can be exploited remotely due to its unauthenticated nature.