{"id":"CVE-2026-16954","state":"PUBLISHED","title":"AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens","description":"The AI Engine  WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being restricted to administrators everywhere else.","publishedAt":"2026-08-06T06:00:10.802Z","updatedAt":"2026-08-06T14:27:40.015Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown AI Engine"],"affected":[{"vendor":"Unknown","product":"AI Engine","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.6.4","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/badce355-e6ce-4dd4-8d9b-c87a7b9db12f/"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:11:00.674Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/16xxx/CVE-2026-16954.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-16954","state":"PUBLISHED","datePublished":"2026-08-06T06:00:10.802Z","dateUpdated":"2026-08-06T14:27:40.015Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2026-07-24T08:07:56.816Z"},"containers":{"cna":{"title":"AI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer Tokens","descriptions":[{"lang":"en","value":"The AI Engine  WordPress plugin before 3.6.4 does not redact secret configuration values before exposing them in an admin page's inline script data, allowing users with the Editor role to read the site's stored third-party API key and authentication tokens in cleartext, despite those secrets being restricted to administrators everywhere else."}],"affected":[{"vendor":"Unknown","product":"AI Engine","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"3.6.4","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/badce355-e6ce-4dd4-8d9b-c87a7b9db12f/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-200 Information Exposure","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2026-08-06T06:00:10.802Z"},"credits":[{"lang":"en","value":"Revanth Hari Narayana Matte","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-08-06T14:26:35.277323Z","id":"CVE-2026-16954","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","type":"CWE","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-06T14:27:40.015Z"}}]}}}