CVE-2026-75798 AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant

The AI Engine WordPress plugin (versions 3.4.0 – 3.7.1 ) contains an authorization flaw in its Editor Assistant feature. The administration-only endpoint does not verify user privileges, instead relying on a token that is distributed to anonymous visitors. This allows an unauthenticated attacker ...