Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user management operations, allowing users with the Administrator role on a Multisite sub-site to take over any account on the network, including the Network Administrator's.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-75796 AI Engine WordPress Plugin Allows Account Takeover on Multisite Networks https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-75796
Post summary
The post announces CVE-2026-75796 as an account takeover flaw in the AI Engine WordPress Plugin on multisite networks, but provides no PoC, exploit code, or patch information.
CVE-2026-75796 The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the targeted account before performing privileged user m… https://www.cve.org/CVERecord?id=CVE-2026-75796
Post summary
The text announces a CVE affecting AI Engine WordPress plugin before 3.6.1, describing an authorization bypass flaw, with no PoC, exploit, active exploitation, patch, or false‑positive discussion provided.