AI Engine <= 3.8.5 - Authenticated (Editor+) Insecure Direct Object Reference to Arbitrary Post Title and Excerpt Modification
- ID
- WPSEC-2026-1207
- Plugin
- AI Engine – The Chatbot, AI Framework & MCP for WordPress (ai-engine)
- Affected
- all versions before 3.8.6
- Remediation
- Update to 3.8.6 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-639
- Usage
- Plugin Low · Affected versions Low among sites WPSec scans, 2026-10-17
- Attack surface
- AI Engine on WPSec AttackSurface
- Fix released
- Published
Description
The AI Engine plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'postId' parameter of the /mwai/v1/helpers/update_post_title and /mwai/v1/helpers/update_post_excerpt REST routes in all versions up to, and including, 3.8.5, due to the routes only checking that the user is an Editor or Administrator and never checking whether the user may edit the specific post. This makes it possible for authenticated attackers with Editor-level access and above to change the title or excerpt of posts they are not permitted to edit, such as WooCommerce coupons, products or orders, navigation menus and templates.
References
- https://wpsec.com/vuln/WPSEC-2026-1207/
- https://plugins.svn.wordpress.org/ai-engine/tags/3.8.6/
- https://wordpress.org/plugins/ai-engine/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS