CVE-2026-75796

The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network, including the Network Administrator's.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/919da0c7-7643-4903-9454-2fb66353f5cb/

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) El plugin de WordPress AI Engine anterior a la versión 3.6.1 no verifica que el usuario solicitante esté autorizado para actuar sobre la cuenta objetivo antes de realizar operaciones privilegiadas de gestión de usuarios, lo que permite a los usuarios con el rol de Administrador en un sub-sitio de Multisite tomar el control de cualquier cuenta en la red, incluyendo la del Administrador de la red.

Information

Published : 2026-08-21 07:16

Updated : 2026-10-18 20:10

NVD link : CVE-2026-75796

Mitre link : CVE-2026-75796

CVE.ORG link : CVE-2026-75796

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2026-75796", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-75796", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-21T12:52:34.391727Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "contact@wpscan.com", "affectedData": [{"vendor": "Unknown", "product": "AI Engine", "versions": [{"status": "affected", "version": "2.8.0", "lessThan": "3.6.1", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-21T07:16:25.453", "references": [{"url": "https://wpscan.com/vulnerability/919da0c7-7643-4903-9454-2fb66353f5cb/", "source": "contact@wpscan.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network, including the Network Administrator's."}, {"lang": "es", "value": "El plugin de WordPress AI Engine anterior a la versi\u00f3n 3.6.1 no verifica que el usuario solicitante est\u00e9 autorizado para actuar sobre la cuenta objetivo antes de realizar operaciones privilegiadas de gesti\u00f3n de usuarios, lo que permite a los usuarios con el rol de Administrador en un sub-sitio de Multisite tomar el control de cualquier cuenta en la red, incluyendo la del Administrador de la red."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "contact@wpscan.com"}