CVE-2026-75796

The AI Engine WordPress plugin (versions 2.8.0–3.6.0) fails to verify authorization before performing privileged user management via MCP User Tools, enabling a sub-site Administrator to take over any network account, including the Network Administrator. Upgrade to version 3.6.1 or later. Exploita...