CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110976
MEDIUMCVSS 4.9NVD feed
Published 18 October 2026 · tracked since 18 October 2026
Description
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleting it, allowing users with the Editor role and above to delete arbitrary posts of any type, includin
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110886 CRITICAL 9.8
- CVE-2026-107436 HIGH 8.8
- CVE-2026-87844 MEDIUM 5.3
- CVE-2026-96534 HIGH 7.7
- CVE-2026-111877 MEDIUM 4.3
- CVE-2026-111942 MEDIUM 4.3
- CVE-2026-110031 HIGH 7.2
- CVE-2026-110032 MEDIUM 5.5
- CVE-2026-110033 MEDIUM 6.8
- CVE-2026-110035 MEDIUM 4.3