CVE-2026-96561 | tigroumeow AI Engine Plugin up to 3.8.0 on WordPress Advisor dashboard widget /mwai-ui/v1/chats/submit advisor_metabox model cross site scripting

October 1, 2026 Yanac

A vulnerability was found in tigroumeow AI Engine Plugin up to 3.8.0 on WordPress. It has been rated as problematic. This affects the function advisor_metabox of the file /mwai-ui/v1/chats/submit of the component Advisor dashboard widget. The manipulation of the argument model leads to cross site scripting.

This vulnerability is referenced as CVE-2026-96561. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More