Threats tagged 'ghsa-9wjr-j39x-f62m'

CVE-2026-16954 is an information exposure vulnerability in the AI Engine WordPress plugin versions before 3.6.4. It allows users with the Editor role to access secret configuration values, such as third-party API keys and authentication tokens, in cleartext via an admin page's inline script data. These secrets are normally restricted to administrators. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.