CVE-2026-16954

The AI Engine WordPress plugin is affected by CVE-2026-16954 in versions before 3.6.4. The issue arises because secret configuration values (third‑party API keys and authentication tokens) are not redacted before being exposed in an admin page’s inline script data. This allows users with the Edit...