CVE-2026-15988

The AI Engine – The Chatbot plugin for WordPress contains a security flaw in versions up to 3.6.5 that allows malicious individuals to exploit a vulnerability through manipulated links. This is caused by inadequate verification of authentication tokens when accessing certain functions, specifically reauth_for_authorize. As a result, an attacker can create new administrator accounts with their own chosen credentials without needing prior access or authorization.

Based on public CVE data (MITRE/NVD).