WordPress security changelog
HIGH CVE-2026-15988 Received

AI Engine reauthorization can turn an administrator click into account creation

AI Engine through 3.6.5 does not correctly validate a nonce in reauth_for_authorize. An unauthenticated attacker can send an administrator a crafted link that combines this CSRF path with WordPress's ?_method=POST override, converting a top-level GET navigation into an authenticated POST to the REST users endpoint. If the logged-in administrator follows it, WordPress creates a new Administrator account using attacker-supplied credentials; the attacker needs no existing site account but does require that administrator interaction.

CVE / CNA score 8.8 CVSS 3.1 · security@wordfence.com
NVD score Pending NVD has not published its own CVSS assessment.
Component
AI Engine – The Chatbot, AI Framework & MCP for WordPress
Plugin slug
ai-engine
Affected
<= 3.6.5
Safe version
3.6.6
Published
Aug 01, 2026
Weakness
CWE-352 — Cross-Site Request Forgery (CSRF)

This CVE was published Aug 01, 2026 and is one of 27 known issues for this plugin.

What to do

Update, patch or deactivate.

Update AI Engine to 3.6.6 or later. Review recently created Administrator accounts and REST user-creation requests, remove unauthorized accounts, invalidate administrator sessions, rotate compromised credentials, and investigate privileged activity if a forged account was created.

A safe version is available, so updating to that version or later is the preferred remediation. If an immediate update is not practical, consider a targeted application patch or temporarily restricting the affected functionality.

Deactivate only when warranted by your risk profile, or when advised by your hosting provider in the limited circumstances where the vulnerability cannot otherwise be mitigated. If you’re unsure which action is appropriate, contact Fused or your hosting provider for guidance.

Source record

Technical description

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauth_for_authorize function. This makes it possible for unauthenticated attackers to create new administrator accounts with attacker-supplied credentials via a CSRF-based REST authentication bypass, granted they can trick a site administrator into performing an action such as clicking on a link. This bypass can be combined with WordPress's ?_method=POST method-override support to convert a top-navigation GET request into an authenticated POST to the REST users endpoint, requiring no existing account on the attacker's part.

CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Primary and upstream sources