CVE-2026-15988

HighCVSS 8.8

Published: 01/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 01/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The AI Engine – The Chatbot, AI Framework & MCP plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the `reauth_for_authorize` function. Unauthenticated attackers can trick an administrator into clicking a link, allowing creation of a new administrator account with attacker-supplied credentials.

Risk Assessment

An attacker can take over the site by creating an administrator account without the administrator's knowledge.

Recommendation

Update the AI Engine plugin to a version that adds proper nonce validation and CSRF protections.

Other vulnerabilities in AI Engine – The Chatbot, AI Framework & MCP

CVE-2026-110732High
The AI Engine – The Chatbot, AI Framework & MCP plugin for WordPress in versions up to and including 3.8.6 is vulnerable to Missing Authorization. The MCP module's OAuth 2.1 Dynamic Client Registration endpoint (/wp-json/mcp/v1/oauth/register) is registered with a permission_callback of __return_true, allowing an unauthenticated user to register an active OAuth client with an attacker-controlled redirect URI. Once an administrator approves the attacker's client on the OAuth consent screen, the attacker can obtain an administrator-bound MCP access token and gain full administrator-level control; the consent page lacks X-Frame-Options or CSP frame-ancestors, enabling clickjacking.

Original NVD description (English source)

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauth_for_authorize function. This makes it possible for unauthenticated attackers to create new administrator accounts with attacker-supplied credentials via a CSRF-based REST authentication bypass, granted they can trick a site administrator into performing an action such as clicking on a link. This bypass can be combined with WordPress's ?_method=POST method-override support to convert a top-navigation GET request into an authenticated POST to the REST users endpoint, requiring no existing account on the attacker's part.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS