CVE-2026-16953: AI Engine WordPress Auth Bypass Flaw

CVE-2026-16953 Overview

CVE-2026-16953 affects the AI Engine WordPress plugin in versions prior to 3.6.4. The plugin fails to verify ownership of guest-uploaded chatbot files before deletion. The deletion routine authorizes the action solely by a client-supplied session cookie value. An unauthenticated attacker who obtains a victim's session identifier and file reference can delete that victim's uploaded files. The vulnerability maps to CWE-639 — Authorization Bypass Through User-Controlled Key.

Critical Impact
Unauthenticated attackers can delete guest-uploaded chatbot files belonging to other users when they can obtain the victim's session identifier and file reference.

Affected Products

AI Engine WordPress plugin versions before 3.6.4
WordPress sites running vulnerable AI Engine installations that permit guest chatbot uploads
Any deployment exposing the plugin's guest file management endpoints

Discovery Timeline

2026-08-08 - CVE-2026-16953 published to NVD
2026-08-11 - Last updated in NVD database

Technical Details for CVE-2026-16953

Vulnerability Analysis

The AI Engine plugin allows guest users to upload files during chatbot interactions. To manage these uploads, the plugin issues a session identifier stored in a client-side cookie. When a deletion request arrives, the plugin uses the cookie value as the sole authorization check and does not verify that the requesting client actually owns the referenced file. This is an insecure direct object reference pattern where the object owner is derived from attacker-controllable input.

The attacker must obtain two pieces of information: the victim's session identifier and a valid file reference associated with that session. Given both, the plugin honors the deletion request without confirming that the caller established the session or uploaded the file. The result is an integrity and availability impact on guest-uploaded content.

Root Cause

The root cause is missing ownership verification on the file deletion handler. The plugin trusts a client-supplied cookie as an ownership token rather than binding file records to a server-verified session record and validating the association before performing destructive actions.

Attack Vector

Exploitation occurs over the network against the plugin's guest file endpoints. The attack requires no authentication and no user interaction, but depends on the attacker acquiring the target's session identifier and file reference. Session identifiers may leak through referrer headers, shared logs, cross-site scripting on the host site, or network interception on misconfigured deployments. Once both values are known, the attacker submits a crafted HTTP request that references the victim's file and includes the victim's session cookie. The plugin performs the deletion.

No verified public exploit code is available. See the WPScan Vulnerability Report for technical details.

Detection Methods for CVE-2026-16953

Indicators of Compromise

Unexpected deletion events for guest chatbot uploads in AI Engine storage directories
HTTP requests to AI Engine deletion endpoints from client IPs that do not match the IP that established the referenced session
Multiple deletion requests reusing the same session cookie value across different source addresses within a short window

Detection Strategies

Inspect web server access logs for POST or DELETE requests targeting AI Engine chatbot file management endpoints and correlate cookie values with originating IP addresses
Alert on anomalous deletion volumes tied to guest sessions, especially where the request origin diverges from the session's initial establishment
Monitor WordPress audit logs and file system events for AI Engine upload directories to identify unauthorized removals

Monitoring Recommendations

Enable verbose logging on the AI Engine plugin and forward logs to a centralized analysis platform for correlation
Track session cookie reuse patterns across distinct network sources to identify session identifier theft
Baseline normal guest upload and deletion activity so deviations trigger review

How to Mitigate CVE-2026-16953

Immediate Actions Required

Upgrade the AI Engine WordPress plugin to version 3.6.4 or later on all WordPress installations
Audit AI Engine upload directories for unexpected file deletions since the vulnerable version was installed
Rotate or invalidate any active guest session identifiers issued by prior plugin versions

Patch Information

The vendor addressed the issue in AI Engine version 3.6.4. The fix binds file ownership to a server-verified session record and validates that association before honoring deletion requests. Refer to the WPScan Vulnerability Report for the advisory details and remediation guidance.

Workarounds

Disable the guest chatbot upload feature within the AI Engine plugin configuration until the patch is applied
Restrict access to the plugin's file management endpoints using web application firewall rules that require authenticated sessions
Enforce HTTPS site-wide and set cookies with Secure, HttpOnly, and SameSite=Strict attributes to reduce session identifier leakage

bash

# Example WordPress CLI upgrade for the AI Engine plugin
wp plugin update ai-engine --version=3.6.4
wp plugin get ai-engine --field=version