CVE-2026-96561

Name of the Vulnerable Software and Affected Versions The AI Engine – The Chatbot, AI Framework & MCP for WordPress versions prior to 3.8.1

Description Stored Cross-Site Scripting occurs due to a chain of missing input neutralization and output escaping. An unauthenticated caller can bypass the server-parameter denylist in the /mwai-ui/v1/chats/submit REST endpoint by using model , which is later canonicalized to model by the convert keys() function. This allows an attacker to inject a controlled string into the $query->model variable. The final checks() function then throws an exception containing this string, which is written unmodified to the PHP error log. The plugin's PHP error-log parser, MeowKit MWAI Helpers::php error logs, retrieves this forged log line, and the Meow MWAI Modules Advisor::run advisor() function appends it to the AI prompt, leading to indirect prompt injection. The resulting JSON is stored in the mwai advisor data option without sanitization. Finally, the advisor metabox() function renders the title and description values directly into the WordPress dashboard widget without proper escaping, allowing arbitrary web scripts to execute when an administrator accesses the dashboard.

Recommendations Update The AI Engine – The Chatbot, AI Framework & MCP for WordPress to version 3.8.1 or later.