{"id":"CVE-2026-111041","kind":"vulnerability","aliases":["CVE-2026-111041"],"related":[],"title":"AI Engine WordPress plugin lets Editors modify posts they should not edit","description":"The AI Engine  WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, allowing users with the Editor role or above to modify, or change the type of, arbitrary posts on the site, including content they are not permitted to edit.","summary":"The AI Engine WordPress plugin before 3.7.9 skips an ownership check on certain AI media management actions. An authenticated user with the Editor role or higher can change or change the type of arbitrary posts on the site, including ones they are not allowed to edit.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","wordpress","wordpress-plugins"],"not_affected_if":["plugin-version-3.7.9-or-later"],"how_to_check":"- Check the installed AI Engine version in the WordPress plugins screen or with `wp plugin get ai-engine --field=version`\n- unknown","fix":"- Update the AI Engine plugin to `3.7.9` or later\n- unknown","status":"open","published_at":"2026-10-18T07:16:52+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","triaged_at":"2026-10-25T04:32:50+00:00","updated_at":"2026-10-25T04:32:50+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T04:32:50Z","model":"claude-haiku-5-5","output":{"fix":"- Update the AI Engine plugin to `3.7.9` or later\n- unknown","reach":"internet","title":"AI Engine WordPress plugin lets Editors modify posts they should not edit","impact":"medium","summary":"The AI Engine WordPress plugin before 3.7.9 skips an ownership check on certain AI media management actions. An authenticated user with the Editor role or higher can change or change the type of arbitrary posts on the site, including ones they are not allowed to edit.","category":"package","nicknames":[],"who_cares":["wordpress","wordpress-plugins"],"confidence":0.7,"needs_auth":"yes","worst_case":"Editor-level users alter arbitrary posts beyond their permissions","analyst_note":"","how_to_check":"- Check the installed AI Engine version in the WordPress plugins screen or with `wp plugin get ai-engine --field=version`\n- unknown","needs_analyst":false,"not_affected_if":["plugin-version-3.7.9-or-later"],"who_is_affected":"Sites running the AI Engine WordPress plugin before `3.7.9` that have users with the Editor role or above. The sources do not say whether the flaw depends on a particular AI Engine feature being enabled, so the exposure of sites without it enabled is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000573,"input_tokens":3321,"output_tokens":482,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111041':15A,18A '-2026':14A,17A '3.7.9':30B,76C 'action':40B,88C 'ai':1A,25B,37B,71C,85C 'allow':67B,93C,99C 'arbitrari':57B,114C 'authent':42B 'certain':36B,84C 'chang':51B,53B,110C 'check':34B 'content':120C 'cve':13A,16A 'edit':12A,69B,95C,126C 'editor':6A,46B,103C 'engin':2A,26B,72C 'higher':49B 'includ':62B,119C 'let':5A 'manag':39B,87C 'media':38B,86C 'modifi':7A,108C 'object':98C 'one':63B 'otherwis':92C 'own':89C 'ownership':33B 'packag':19B 'perform':83C 'permit':124C 'plugin':4A,23B,28B,74C 'post':8A,58B,115C 'role':47B,104C 'site':61B,118C 'skip':31B 'target':97C 'type':55B,112C 'user':43B,82C,100C 'verifi':79C 'wordpress':3A,20B,22B,27B,73C 'wordpress-plugin':21B","nicknames":[],"mitigations":[],"who_affected":"Sites running the AI Engine WordPress plugin before `3.7.9` that have users with the Editor role or above. The sources do not say whether the flaw depends on a particular AI Engine feature being enabled, so the exposure of sites without it enabled is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T07:16:52+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111041","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111041","severity":null,"published_at":"2026-10-18T07:16:52+00:00","modified_at":"2026-10-19T21:04:50+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}