{"id":"CVE-2026-65566","kind":"vulnerability","aliases":["CVE-2026-65566"],"related":[],"title":"AI Engine WordPress plugin: CSRF flaw lets attackers act as admins","description":"Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.","summary":"AI Engine, a WordPress plugin by Meow Apps, has a cross-site request forgery flaw affecting versions through 3.8.8. A logged-in site administrator who opens a malicious page could be tricked into making changes to the site without knowing.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ai-engine","fixed":[],"affected":"<= 3.8.8","ecosystem":"wordpress"}],"ecosystems":[],"tags":["ai-engine","csrf","package","self-hosted","wordpress"],"not_affected_if":["plugin-deactivated","plugin-not-installed","plugin-updated"],"how_to_check":"- Run `wp plugin get ai-engine --field=version`, or see Plugins in wp-admin.\n- Any version up to and including 3.8.8 is affected. 3.8.8 is the latest release listed, so updating does not help yet.","fix":null,"status":"open","published_at":"2026-10-30T17:17:27+00:00","first_seen_at":"2026-10-30T17:31:39+00:00","triaged_at":"2026-10-30T17:32:02+00:00","updated_at":"2026-10-30T17:32:50+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-30T17:32:02Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"AI Engine WordPress plugin: CSRF flaw lets attackers act as admins","impact":"medium","summary":"AI Engine, a WordPress plugin by Meow Apps, has a cross-site request forgery flaw affecting versions through 3.8.8. A logged-in site administrator who opens a malicious page could be tricked into making changes to the site without knowing.","audience":"businesses","category":"package","nicknames":[],"who_cares":["wordpress","ai-engine","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Attacker changes plugin settings or site content as a logged-in admin","analyst_note":"Check the NVD entry and the Wordfence or vendor advisory for the fixed version and which actions the CSRF exposes.","how_to_check":"- Check the installed AI Engine plugin version in the WordPress admin under Plugins, or with `wp plugin get ai-engine --field=version`\n- Compare the result against the affected range, through `3.8.8`","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-not-installed","plugin-updated"],"who_is_affected":"Sites running the AI Engine WordPress plugin at version 3.8.8 or earlier are affected. The risk is highest where administrators stay logged in while browsing other sites. The sources do not say which features are reachable through the forged request.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000681,"input_tokens":4114,"output_tokens":539,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the NVD entry and the Wordfence or vendor advisory for the fixed version and which actions the CSRF exposes.","search":"'-2026':13A,16A '-65566':14A,17A '3.8.8':49B,99C 'act':9A 'admin':11A 'administr':55B 'affect':46B,93C 'ai':1A,19A,22B,30B,82C,85C,94C 'ai-engin':21B,84C 'ai-engine':18A 'allow':87C 'app':37B,81C 'attack':8A 'chang':66B 'could':61B 'cross':41B,73C,88C 'cross-sit':40B,72C 'csrf':5A,24B,77C 'cve':12A,15A 'engin':2A,23B,31B,83C,86C,95C 'engine':20A 'flaw':6A,45B 'forgeri':44B,76C 'forgery.this':91C 'host':28B 'issu':92C 'know':71B 'let':7A 'log':52B 'logged-in':51B 'make':65B 'malici':59B 'meow':36B,80C 'n/a':97C 'open':57B 'packag':25B 'page':60B 'plugin':4A,34B 'request':43B,75C,90C 'self':27B 'self-host':26B 'site':42B,54B,69B,74C,89C 'trick':63B 'version':47B 'vulner':78C 'without':70B 'wordpress':3A,29B,33B","nicknames":[],"mitigations":[],"who_affected":"WordPress sites running the AI Engine plugin (Meow Apps, about 90,000 installs) at 3.8.8 or earlier. Exploitation needs a logged-in privileged user, usually an administrator, to visit an attacker's page, so sites where admins browse the web while logged in are most at risk. Sites without the plugin can skip it. The specific forged action is not published.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T17:17:27+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-65566","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65566","severity":null,"published_at":"2026-10-30T17:17:27+00:00","modified_at":"2026-10-30T17:18:40+00:00","first_seen_at":"2026-10-30T17:31:39+00:00","fetched_at":"2026-10-30T17:31:39+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-65566:1178","url":null,"severity":null,"published_at":"2026-10-30T17:32:50+00:00","modified_at":"2026-10-30T17:32:50+00:00","first_seen_at":"2026-10-30T17:32:50+00:00","fetched_at":"2026-10-30T17:32:50+00:00","note":"Patchstack CNA: CSRF (CWE-352) in AI Engine <= 3.8.8, CVSS 8.8, credited to AndrewN. Patchstack and wordpress.org list 3.8.8 as the latest version and no fixed release is reported, so fix is none/unknown. The exact CSRF action is not public. No exploitation or PoC found. Nothing marked verified: the sources are Patchstack's database page and the wordpress.org listing, not a vendor advisory. Check for a release newer than 3.8.8 later."}],"documents":[{"id":24984,"url":"https://patchstack.com/database/wordpress/plugin/ai-engine/vulnerabilities","title":"Patchstack: AI Engine vulnerability history (CSRF <= 3.8.8, latest version 3.8.8)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":24985,"url":"https://wordpress.org/plugins/ai-engine/","title":"AI Engine plugin page, wordpress.org","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}