What the vulnerability does
01Description
The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauth_for_authorize function. This makes it possible for unauthenticated attackers to create new administrator accounts with attacker-supplied credentials via a CSRF-based REST authentication bypass, granted they can trick a site administrator into performing an action such as clicking on a link. This bypass can be combined with WordPress's ?_method=POST method-override support to convert a top-navigation GET request into an authenticated POST to the REST users endpoint, requiring no existing account on the attacker's part.
Explanation of Vulnerability in Simple Terms
02Summary
The AI Engine plugin for WordPress versions 3.6.5 and earlier is vulnerable to cross-site request forgery (CSRF). An attacker can trick a logged-in site administrator into visiting a malicious webpage, which then performs unauthorized actions on the WordPress site without the admin's knowledge. This can lead to data theft, site modification, or malware installation.
What an attacker can do
03Attacker Capabilities
Trick an admin into visiting a malicious page to perform unauthorized actions on the WordPress site.
Potential impact on your site
04Site Impact
An attacker can modify site settings, steal data, or inject malware by exploiting an admin's active session.
Conditions required to exploit
05Prerequisites
Admin must be logged in and visit an attacker-controlled webpage.
Key dates
06Disclosure timeline
August 1, 2026
CVE published
