Vulnerability in Ai Engine
CVE-2026-16955
The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the…
Affected products
- Unknown Ai Engine — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)