CVE-2026-16955

The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at subscriber level requires a non-default public API feature to be enabled; otherwise the same issue is reachable by an administrator, which on multisite allows a non-super subsite administrator to read the network-shared configuration and its secrets.

CVSS v3.1

5.0 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

EPSS

0.22% chance of exploitation in the next 30 days, 13th percentile

Published

2026-08-08

Updated

2026-08-11

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/1b413d84-61c7-4e19-a693-312d74f618ff/

References

• CVE Record
• NVD entry

Related

• CVE-2026-16954
• CVE-2026-16957
• CVE-2026-16953
• CVE-2026-16959
• CVE-2026-16950
• CVE-2026-16962