# AI Engine <= 3.8.5 - Authenticated (Editor+) Insecure Direct Object Reference to Arbitrary Post Title and Excerpt Modification

- **ID:** WPSEC-2026-1207
- **Plugin:** AI Engine – The Chatbot, AI Framework & MCP for WordPress (`ai-engine`), https://wordpress.org/plugins/ai-engine/
- **Affected versions:** all versions before 3.8.6
- **Fixed in:** 3.8.6 (Update to 3.8.6 or later.)
- **Severity:** Low 2.7 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)
- **Weakness:** CWE-639
- **Usage among sites WPSec scans:** plugin Low, affected versions Low (as of 2026-10-17)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/ai-engine
- **Fix released:** 2026-10-17
- **Published:** 2026-10-18
- **URL:** https://wpsec.com/vuln/WPSEC-2026-1207/

## Description

The AI Engine plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'postId' parameter of the /mwai/v1/helpers/update_post_title and /mwai/v1/helpers/update_post_excerpt REST routes in all versions up to, and including, 3.8.5, due to the routes only checking that the user is an Editor or Administrator and never checking whether the user may edit the specific post. This makes it possible for authenticated attackers with Editor-level access and above to change the title or excerpt of posts they are not permitted to edit, such as WooCommerce coupons, products or orders, navigation menus and templates.

## References

- https://wpsec.com/vuln/WPSEC-2026-1207/
- https://plugins.svn.wordpress.org/ai-engine/tags/3.8.6/
- https://wordpress.org/plugins/ai-engine/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-1207/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.