Live › vulnerability › CVE-2026-112828
Go to dashboardAI Engine is a WordPress plugin by Meow Apps that adds AI features to a site. A missing authorization check lets a user reach functionality they should not be allowed to use, according to the advisory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 09:29 UTC. All times on this page are UTC.
Sites running the AI Engine WordPress plugin at version 3.8.6 or earlier are affected. The description does not say which endpoints or roles are involved, so whether a logged-out visitor or only a low-privilege user can reach the flaw is unknown.
No product ranges from the sources yet.
wp plugin get ai-engine --field=version3.8.6 or earlier3.8.6; the advisory does not name the fixed release, so check the plugin changelogEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a through 3.8.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-112828")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.