What is GHSA-r675-399r-4w8x?

GHSA-r675-399r-4w8x is a security advisory published by GitHub Security Advisories with High severity. The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is...

Which CVE IDs does GHSA-r675-399r-4w8x cover?

GHSA-r675-399r-4w8x covers the following CVE IDs: CVE-2026-75796. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r675-399r-4w8x?

GHSA-r675-399r-4w8x has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-r675-399r-4w8xHighCVSS 7.2

The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-75796 →

📋 Description

The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network, including the Network Administrator's.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-75796
https://wpscan.com/vulnerability/919da0c7-7643-4903-9454-2fb66353f5cb
https://github.com/advisories/GHSA-r675-399r-4w8x