Privilege Escalation Vulnerability in AI Engine WordPress Plugin
CVE-2026-75796
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-75796?
The AI Engine plugin for WordPress, prior to version 3.6.1, contains a vulnerability that fails to properly validate user permissions for privileged management actions. This allows unauthorized users with Administrator roles on Multisite sub-sites to gain control over any account within the network, including that of the Network Administrator. Such unauthorized access can lead to significant security risks, compromising the integrity of user accounts and site management.
Affected Version(s)
AI Engine 2.8.0 < 3.6.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.