CVE-2026-12511 | AI Engine Plugin up to 3.5.4 on WordPress File Download filename path traversal

July 14, 2026 Yanac

A vulnerability identified as critical has been detected in AI Engine Plugin up to 3.5.4 on WordPress. This issue affects some unknown processing of the component File Download Handler. Performing a manipulation of the argument filename results in path traversal.

This vulnerability is identified as CVE-2026-12511. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More