CVE-2026-65566

AI Engine exposes a cross-site request forgery flaw

Meow Apps · AI Engine WordPress plugin

First documented disclosure · Review checkpoint

Summary

A forged request can induce an unwanted action through a privileged user.

Severity and exploitation evidence

High · 8.8/10 · CVSS 3.1. Severity source.

Exploitation not established: No observed exploitation established. Patchstack rates practical priority low despite its high CVSS score.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Patchstack reports missing or ineffective CSRF protection; the affected action is not disclosed.

Conditions required

An attacker persuades a logged-in privileged user to interact with crafted content.

Potential impact

Unauthorized state change under the victim’s authority; exact operation and demonstrated consequence remain unspecified.

Affected versions and configurations

Through 3.8.8.

Fix and mitigation status

3.8.9 for this issue.

Practical next steps

Update to a release containing the 3.8.9 fix and require per-action CSRF validation.

Operating lesson

AI administration routes need the same request-origin protections as other privileged settings.

Evidence and limits

Private report October 29, publication October 30. CVSS 8.8 is Patchstack’s score; its separate impact/priority assessment is low. Generic CSRF examples on the page are not verified effects of this flaw.

Sources