Vulnerability  ·  2026-04-21

AI Engine Pro Authorization Bypass Vulnerability

VulnerabilityMedium impactGlobalCVE-2026-39506
Missing Authorization vulnerability in Jordy Meow AI Engine Pro allows exploiting incorrectly configured access control security levels, enabling unauthorized access to AI engine functionality.
Attackers can exploit incorrectly configured access control settings to bypass authorization checks and gain unauthorized access to AI engine capabilities.
AI Engine Pro versions from n/a through < 3.4.2 used in WordPress environments.
Update to AI Engine Pro version 3.4.2 or later. Review and properly configure access control security levels according to vendor guidelines.
Sources
NVD
See this in the live feed Explore related AI security and governance findings — updated every morning.
Open the feed →