{"uuid": "dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mryzu3tlv423", "content": "AI Engine, a WordPress plugin on 100,000+ sites, has a flaw: one link a logged-in admin clicks can create a hidden admin account for an attacker.\n\nAffects versions up to 3.6.5; no attacker login needed.\n\nFix: update to 3.6.6+. (CVE-2026-15988)", "creation_timestamp": "2026-08-01T08:18:46.001416Z"}