CVE-2026-75796 Overview
CVE-2026-75796 is a privilege escalation vulnerability in the AI Engine WordPress plugin versions before 3.6.1. The plugin fails to verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations. On WordPress Multisite installations, an attacker with the Administrator role on a sub-site can take over any account across the network, including the Network Administrator account. The flaw is categorized under CWE-269: Improper Privilege Management.
Critical Impact
A sub-site Administrator can hijack the Network Administrator account, gaining full control over every site in a WordPress Multisite network.
Affected Products
- AI Engine WordPress plugin versions prior to 3.6.1
- WordPress Multisite installations running the affected plugin
- Sites where the plugin exposes user management endpoints to sub-site Administrators
Discovery Timeline
- 2026-08-21 - CVE-2026-75796 published to NVD
- 2026-08-26 - Last updated in NVD database
Technical Details for CVE-2026-75796
Vulnerability Analysis
The AI Engine plugin exposes user management operations without correctly validating the authorization boundary between a sub-site Administrator and network-wide accounts. WordPress Multisite treats sub-site Administrators as scoped roles. They should not be able to modify accounts belonging to other sites or the Super Admin. The plugin's endpoints omit that check.
An authenticated sub-site Administrator can invoke the vulnerable operation and target any user_id on the network. Because the plugin trusts the caller's role without confirming the caller controls the target account, the request succeeds. The attacker can change credentials, email, or metadata on the Network Administrator account and pivot to full network takeover.
Root Cause
The root cause is a missing authorization check in the plugin's user management handler. The code confirms that the caller holds an Administrator capability but does not confirm that the target account belongs to the caller's scope. This is a classic [CWE-269] improper privilege management pattern where a coarse capability check replaces a fine-grained ownership check.
Attack Vector
Exploitation requires an authenticated session with the Administrator role on a Multisite sub-site. The attacker sends a crafted HTTP request to the plugin's user management endpoint, supplying the user ID of a higher-privileged account. The server processes the request without rejecting the cross-scope target and applies the requested change. No user interaction from the victim is required.
See the WPScan Vulnerability Report for additional technical detail. No public proof-of-concept code is available at this time.
Detection Methods for CVE-2026-75796
Indicators of Compromise
- Unexpected password, email, or role changes on Network Administrator or cross-site accounts logged in the WordPress wp_users and wp_usermeta tables.
- Requests to AI Engine plugin REST or AJAX endpoints originating from sub-site Administrator sessions but referencing user_id values outside their site scope.
- New Super Admin or Network Administrator sessions from IP addresses previously associated only with sub-site Administrator accounts.
Detection Strategies
- Audit WordPress activity logs for user management actions performed against accounts that do not belong to the acting Administrator's sub-site.
- Enable request logging on the web server and search for POST requests to AI Engine plugin routes containing foreign user_id parameters.
- Correlate account modification events with the acting user's role scope to flag privilege boundary violations.
Monitoring Recommendations
- Alert on any password or email change targeting a Super Admin account.
- Monitor plugin update status across the Multisite network and flag hosts still running AI Engine versions before 3.6.1.
- Track authentication events for the Network Administrator account and investigate logins that follow recent sub-site Administrator activity.
How to Mitigate CVE-2026-75796
Immediate Actions Required
- Upgrade the AI Engine plugin to version 3.6.1 or later on every site in the network.
- Review all Network Administrator and Super Admin accounts for unauthorized credential or email changes and reset them.
- Audit the Administrator role assignments on every Multisite sub-site and remove untrusted accounts.
Patch Information
The vendor addressed the vulnerability in AI Engine version 3.6.1 by adding the missing authorization check on user management operations. Refer to the WPScan Vulnerability Report for advisory details and confirm the installed version against the plugin repository entry.
Workarounds
- Temporarily deactivate the AI Engine plugin across the Multisite network until every site is upgraded to 3.6.1.
- Restrict sub-site Administrator assignments to fully trusted personnel while the patch is being deployed.
- Place the WordPress admin surface behind an IP allowlist or web application firewall rule blocking requests to AI Engine user management endpoints from sub-site Administrator contexts.
# Configuration example: verify plugin version and force upgrade via WP-CLI
wp plugin get ai-engine --field=version --network
wp plugin update ai-engine --version=3.6.1 --network
wp plugin deactivate ai-engine --network # emergency workaround only
Disclaimer: This content was generated using AI. While we strive for accuracy, please verify critical information with official sources.
