CVE-2026-96561

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due to a chain of missing input neutralization and output escaping across the /mwai-ui/v1/chats/submit REST endpoint, the PHP error-log parser (MeowKit MWAI Helpers::php error logs), the Advisor task (Meow MWAI Modules Advisor::run advisor), and the Advisor dashboard widget (advisor metabox): the server-parameter denylist in chat submit strips only exact key names such as 'model' while convert keys() later canonicalizes 'model ' back to 'model', allowing an unauthenticated caller to place an attacker-controlled string (including CR/LF) into $query->model; final checks() throws an Exception whose message embeds that raw string, and the non-streaming, non-admin catch branch writes it to the PHP error log unmodified — creating a forged log line that the plugin's own parser subsequently returns as recent PHP-error content; run advisor() then appends that content verbatim to the AI prompt (indirect prompt injection — CWE-1427), the returned JSON is stored in the mwai advisor data option with no schema validation or HTML sanitization, and advisor metabox() concatenates the resulting 'title' and 'description' values directly into the WordPress dashboard widget without esc html(), wp kses(), or equivalent escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrator accesses the WordPress dashboard.