CVE-2026-65566

Name of the Vulnerable Software and Affected Versions AI Engine versions prior to 3.8.9

Description A Cross-Site Request Forgery (CSRF) issue exists in the AI Engine plugin for WordPress. This occurs due to missing or incorrect nonce validation—a security token used to verify that a request was intentionally sent by the user—within a function. This allows unauthenticated attackers to perform unauthorized actions by tricking a site administrator into clicking a malicious link.

Recommendations Update to a version newer than 3.8.8.