What is GHSA-7phx-x376-59jf?

GHSA-7phx-x376-59jf is a security advisory published by GitHub Security Advisories with Medium severity. The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit...

Which CVE IDs does GHSA-7phx-x376-59jf cover?

GHSA-7phx-x376-59jf covers the following CVE IDs: CVE-2026-110982. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7phx-x376-59jf?

GHSA-7phx-x376-59jf has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

GHSA-7phx-x376-59jfMediumCVSS 4.9

The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-110982 →

📋 Description

The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Editor role and above to modify arbitrary posts of any type, including content they cannot otherwise edit such as navigation menus, block templates, global styles and WooCommerce coupons.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-110982
https://wpscan.com/vulnerability/59f18552-e60e-466f-949d-cc09aa657bbe
https://github.com/advisories/GHSA-7phx-x376-59jf