Cross-Site Request Forgery Vulnerability in Meow Apps AI Engine Product
CVE-2026-65566

8.8HIGH

Key Information:

Vendor

WordPress
Status
Ai Engine
Vendor
CVE Published:
30 October 2026

What is CVE-2026-65566?

The Meow Apps AI Engine is vulnerable to a Cross-Site Request Forgery (CSRF) attack, which allows attackers to execute unauthorized commands on behalf of users. This vulnerability affects users who have access to the affected product versions, including 3.8.8. Proper mitigation measures should be taken to secure the application against potential exploits.

Affected Version(s)

AI Engine 0 <= 3.8.8

References

https://patchstack.com/database/wordpress/plugin/ai-engin...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

AndrewN | Patchstack Bug Bounty Program
.