CVE-2026-123478highCWE-79

CVE-2026-123478: high-severity vulnerability in Meow Apps AI Engine

WordPress AI Engine plugin <= 3.9.1 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor AI Engine

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Meow Apps AI Engine ai-engine allows Stored XSS.This issue affects AI Engine: from n/a through 3.9.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Meow Apps · AI Engine
Related CVEs — Meow Apps AI Engine

In the same product, most dangerous first.

CVE-2026-27407HIGHWordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2026-110888MEDIUMWordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-65566HIGHWordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-112828MEDIUMWordPress AI Engine plugin <= 3.8.6 - Broken Access Control vulnerabilityEPSS 0.2%