CVE-2026-16954

The AI Engine WordPress plugin (versions prior to 3.6.4 ) contains a sensitive information disclosure vulnerability. The plugin fails to redact secret configuration values before exposing them within an admin page's inline script data . This flaw allows users with the Editor role to read stored t...