CVE-2026-16954: AI Engine Plugin Information Disclosure

CVE-2026-16954 Overview

CVE-2026-16954 affects the AI Engine WordPress plugin in versions prior to 3.6.4. The plugin fails to redact secret configuration values before injecting them into an admin page's inline script data. Users assigned the Editor role can read the site's stored third-party API key and authentication tokens in cleartext. These secrets are otherwise restricted to administrators, so the flaw breaks the plugin's intended access boundary. Attackers with Editor access can harvest credentials for downstream AI service abuse or lateral movement into connected accounts.

Critical Impact
Editor-level WordPress users can extract administrator-only API keys and authentication tokens from inline script data rendered on an admin page.

Affected Products

AI Engine WordPress plugin versions before 3.6.4
WordPress sites exposing the affected admin page to Editor-role users
Third-party AI services whose API keys are stored in the plugin configuration

Discovery Timeline

2026-08-06 - CVE-2026-16954 published to NVD
2026-08-06 - Last updated in NVD database

Technical Details for CVE-2026-16954

Vulnerability Analysis

The AI Engine plugin renders an admin page that embeds configuration state directly into inline JavaScript. This inline script data includes secret values such as third-party API keys and authentication tokens. The plugin does not redact or strip these secrets before serialization. Any user permitted to load the admin page receives the secrets in the rendered HTML. WordPress Editors have access to this admin page even though they are not intended to view stored credentials.

The issue is a broken access control failure combined with sensitive information exposure. Elsewhere in the plugin, the same secrets are gated behind administrator capability checks. The inline script path bypasses those checks by treating the values as ordinary page data. This creates a privilege boundary violation where a lower-privileged role reads data reserved for a higher-privileged role.

Root Cause

The root cause is missing redaction logic in the code path that serializes plugin settings into inline script data. The plugin trusts that any user capable of loading the admin page is authorized to see all settings, which is not consistent with WordPress's role model.

Attack Vector

An attacker with Editor credentials logs into the WordPress dashboard and navigates to the AI Engine admin page. The attacker inspects the page source or the DOM to locate the inline script containing serialized plugin settings. The API key and tokens appear in cleartext within that script block. The attacker copies the values and reuses them against the associated third-party AI service or backend endpoints.

No exploit code is required. The disclosure occurs during normal page rendering. See the WPScan Vulnerability Report for reference details.

Detection Methods for CVE-2026-16954

Indicators of Compromise

Access log entries showing Editor-role accounts loading the AI Engine plugin admin page
Unexpected outbound API calls to configured third-party AI providers using the stored API key
Anomalous billing or usage spikes on the connected AI service account
Editor accounts viewing plugin configuration pages that are typically visited only by administrators

Detection Strategies

Audit WordPress access logs for requests to the AI Engine admin endpoints from non-administrator users
Review the currently installed plugin version and flag any host running AI Engine below 3.6.4
Correlate WordPress role changes with subsequent admin page visits to identify credential harvesting attempts
Inspect rendered admin pages in a test environment to confirm whether inline script data still contains secrets after patching

Monitoring Recommendations

Enable WordPress audit logging for user role assignments and admin page access
Monitor third-party AI provider dashboards for unrecognized API key usage patterns
Alert on Editor accounts performing actions outside their normal editorial workflow

How to Mitigate CVE-2026-16954

Immediate Actions Required

Update the AI Engine WordPress plugin to version 3.6.4 or later
Rotate all third-party API keys and authentication tokens configured in the plugin
Review the WordPress user list and remove Editor accounts that no longer require access
Inspect third-party AI service logs for unauthorized use of the previously stored credentials

Patch Information

The vendor addressed the issue in AI Engine version 3.6.4 by redacting secret configuration values before they are included in inline script data on admin pages. Refer to the WPScan Vulnerability Report for the advisory reference.

Workarounds

Restrict access to the AI Engine admin page to administrator accounts using a capability management plugin until patching is complete
Temporarily remove stored API keys from the plugin and disable AI features until the update is applied
Downgrade or suspend Editor-role accounts on sites that cannot be patched immediately

bash

# Update AI Engine via WP-CLI to the fixed release
wp plugin update ai-engine --version=3.6.4
wp plugin list --name=ai-engine --fields=name,status,version