Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get_audio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services, if "Public API" is enabled in the plugin settings, and 'allow_url_fopen' is set to 'On' on the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-0746 Server-Side Request Forgery in AI Engine WordPress Plugin via 'get_audio' Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0746
Post summary
The post announces a new SSRF vulnerability (CVE‑2026‑0746) in the AI Engine WordPress Plugin via its get_audio function, lacking further exploit, mitigation, or proof‑of‑concept details.
CVE-2026-0746 The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get_audio' function. This makes it … https://www.cve.org/CVERecord?id=CVE-2026-0746
Post summary
The text announces a Server‑Side Request Forgery vulnerability in AI Engine plugin versions up to 3.3.2, detailing the affected function, but provides no PoC, exploit, or patch information.