{"id":"CVE-2026-123478","kind":"vulnerability","aliases":["CVE-2026-123478"],"related":[],"title":"AI Engine WordPress plugin: stored XSS through 3.9.1","description":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.1.","summary":"AI Engine, a WordPress plugin by Meow Apps, has a stored cross-site scripting flaw in versions through 3.9.1. An attacker who can get script into stored content can run it in other users' browsers.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ai-engine","fixed":[],"affected":"<= 3.9.1","ecosystem":"wordpress"}],"ecosystems":[],"tags":["ai-engine","package","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- WordPress admin > Plugins: read the AI Engine version. 3.9.1 or lower is in the affected range per the CVE description.\n- Or run: wp plugin get ai-engine --field=version\n- Also check AI Engine Pro (ai-engine-pro) if you use it; no source confirms it is affected.","fix":"No source names the fixed version for this CVE. The wordpress.org page lists 3.9.3 as current (Nov 10, 2026); its 3.9.2 entry (Nov 6) hardens uploads against disguised HTML, reported via Patchstack, but does not cite this CVE. Update to the latest release (3.9.3 or later) as the practical step.","status":"open","published_at":"2026-11-11T11:17:16+00:00","first_seen_at":"2026-11-11T11:26:56+00:00","triaged_at":"2026-11-11T11:27:32+00:00","updated_at":"2026-11-11T11:29:25+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-11-11T11:27:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"AI Engine WordPress plugin: stored XSS through 3.9.1","impact":"medium","summary":"AI Engine, a WordPress plugin by Meow Apps, has a stored cross-site scripting flaw in versions through 3.9.1. An attacker who can get script into stored content can run it in other users' browsers.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","ai-engine"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Attacker script runs in other users' browsers on the site","analyst_note":"Confirm the fixed version and required privileges from the NVD entry or the Meow Apps / WPScan advisory for CVE-2026-123478.","how_to_check":"- Check the installed AI Engine plugin version in the WordPress admin under Plugins.\n- Compare the installed `ai-engine` version against `3.9.1`; versions up to and including `3.9.1` are affected per the description.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the AI Engine (ai-engine) WordPress plugin at version 3.9.1 or earlier are affected. The sources do not say which configurations or roles are needed to inject the stored script.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00071,"input_tokens":4546,"output_tokens":511,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm the fixed version and required privileges from the NVD entry or the Meow Apps / WPScan advisory for CVE-2026-123478.","search":"'-123478':11A,14A '-2026':10A,13A '3.9.1':8A,42B,90C 'affect':84C 'ai':1A,16A,19B,23B,75C,78C,85C 'ai-engin':18B,77C 'ai-engine':15A 'allow':80C 'app':30B,74C 'attack':44B 'browser':58B 'content':51B 'cross':35B,68C 'cross-sit':34B,67C 'cve':9A,12A 'engin':2A,20B,24B,76C,79C,86C 'engine':17A 'flaw':38B 'generat':66C 'get':47B 'improp':59C 'input':62C 'issu':83C 'meow':29B,73C 'n/a':88C 'neutral':60C 'packag':21B 'page':65C 'plugin':4A,27B 'run':53B 'script':37B,48B,70C 'site':36B,69C 'store':5A,33B,50B,81C 'user':57B 'version':40B 'vulner':71C 'web':64C 'wordpress':3A,22B,26B 'xss':6A 'xss.this':82C","nicknames":[],"mitigations":[],"who_affected":"WordPress sites running the AI Engine (ai-engine) plugin at version 3.9.1 or earlier. The CVSS vector (from Patchstack) says no login is needed and a victim must interact (for example an admin viewing the stored content), but no advisory text was found to confirm the entry point. Sites without the plugin can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["aiengine"],"ptokens":["ai","engine"],"labels":["aiengine","high","package","wordpress"],"campaign_type":null,"search_a":"'-123478':11A,14A '-2026':10A,13A '3.9.1':8A 'ai':1A,16A 'ai-engine':15A 'cve':9A,12A 'engin':2A 'engine':17A 'plugin':4A 'store':5A 'wordpress':3A 'xss':6A","search_b":"'3.9.1':42B 'ai':19B,23B 'ai-engin':18B 'app':30B 'attack':44B 'browser':58B 'content':51B 'cross':35B 'cross-sit':34B 'engin':20B,24B 'flaw':38B 'get':47B 'meow':29B 'packag':21B 'plugin':27B 'run':53B 'script':37B,48B 'site':36B 'store':33B,50B 'user':57B 'version':40B 'wordpress':22B,26B","search_c":"'3.9.1':90C 'affect':84C 'ai':75C,78C,85C 'ai-engin':77C 'allow':80C 'app':74C 'cross':68C 'cross-sit':67C 'engin':76C,79C,86C 'generat':66C 'improp':59C 'input':62C 'issu':83C 'meow':73C 'n/a':88C 'neutral':60C 'page':65C 'script':70C 'site':69C 'store':81C 'vulner':71C 'web':64C 'xss.this':82C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T11:17:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123478","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123478","severity":null,"published_at":"2026-11-11T11:17:16+00:00","modified_at":"2026-11-11T11:17:16+00:00","first_seen_at":"2026-11-11T11:26:56+00:00","fetched_at":"2026-11-11T11:26:56+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-123478:3542","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123478","severity":null,"published_at":"2026-11-11T11:29:25+00:00","modified_at":"2026-11-11T11:29:25+00:00","first_seen_at":"2026-11-11T11:29:25+00:00","fetched_at":"2026-11-11T11:29:25+00:00","note":"NVD page is empty of detail; no Meow Apps/Patchstack/WPScan advisory found for this id (search returned only sibling CVEs). Fix version unconfirmed; 3.9.3 is current per wordpress.org changelog. Nothing verified. Search tools worked; X not checked.","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-123478","https://wordpress.org/plugins/ai-engine/"]}],"documents":[{"id":125074,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123478","title":"NVD CVE-2026-123478","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":24985,"url":"https://wordpress.org/plugins/ai-engine/","title":"AI Engine plugin page and changelog (wordpress.org)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}