{"vulnerability": "CVE-2026-15988", "sightings": [{"uuid": "5a8a4417-eac4-48cf-9f6c-2ecbb8cf40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzjm4yarb2z", "content": "\ud83d\udfe0 CVE-2026-15988 - High (8.8)\n\nThe AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerabl...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-15988/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T13:00:41.342391Z"}, {"uuid": "57b33cca-18cc-4ea5-bc98-933a1e7bec6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrzxma4lnn2v", "content": "CVE-2026-15988: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 AI Engine \u0434\u043b\u044f WordPress - \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0430\u0439\u0442 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/A3C87B53-32E7-42A6-AC5C-5C27E38BC236", "creation_timestamp": "2026-08-01T17:11:13.746195Z"}, {"uuid": "7676253c-07b6-47d9-8d3c-314ee3b44970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrzxmoptvl2c", "content": "CVE-2026-15988: \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05e4\u05dc\u05d0\u05d2\u05d9\u05df AI Engine \u05dc\u05d5\u05d5\u05e8\u05d3\u05e4\u05e8\u05e1 - \u05de\u05d4 \u05e6\u05e8\u05d9\u05da \u05dc\u05d3\u05e2\u05ea?\n\n\n\nhttps://khesef.xyz/posts/A79AFABF-6CEB-4093-B9DE-B64F6CD89176", "creation_timestamp": "2026-08-01T17:11:28.553457Z"}, {"uuid": "3ea25a8f-b4a3-4c61-9a3d-74510e32ef61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms22pcpgwe2a", "content": "CVE-2026-15988 - CSRF in AI Engine WordPress plugin enables attacker to create admin accounts via REST auth bypass. CVSS 8.8. Unpatched - disable plugin now. #CVE #WordPress #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-15988/", "creation_timestamp": "2026-08-01T18:06:38.142151Z"}, {"uuid": "dffd3a2d-fbf0-49f2-9a2d-ed79c51fd9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mryzu3tlv423", "content": "AI Engine, a WordPress plugin on 100,000+ sites, has a flaw: one link a logged-in admin clicks can create a hidden admin account for an attacker.\n\nAffects versions up to 3.6.5; no attacker login needed.\n\nFix: update to 3.6.6+. (CVE-2026-15988)", "creation_timestamp": "2026-08-01T08:18:46.001416Z"}, {"uuid": "d702afaf-d775-468f-8db0-07a28ad83a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-15988", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ugqtucjoanp2", "content": "CVE-2026-15988 - AI Engine\nCVE ID : CVE-2026-15988\n \n Published : Aug. 1, 2026, 8:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The AI Engine \u2013 The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all version...", "creation_timestamp": "2026-08-01T09:44:26.268769Z"}]}