CVE-2026-65566 reported as CSRF flaw in Meow Apps AI Engine plugin
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Meow Apps
- Product
- AI Engine
- First seen
Summary
A cross-site request forgery vulnerability, CVE-2026-65566, has been published for the AI Engine (ai-engine) plugin, with a CVSS score of 8.8. The listing says it affects versions from n/a through 3.8.8, and the item does not indicate active exploitation.
If you use Meow Apps
Check whether AI Engine is installed and which version is running
Update AI Engine to a release later than 3.8.8 once the vendor patch is available
Limit admin sessions and avoid clicking untrusted links while logged in to the site
Update AI Engine to a version newer than 3.8.8
Log out of WordPress admin sessions when browsing untrusted sites
Review recent plugin settings changes for unexpected edits
What the sources say 2
· Mastodon: “CVE-2026-65566 - High (8.8) Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.” Source
· Mastodon: “Cross-Site Request Forgery (CSRF) vulnerability in Meow Apps AI Engine ai-engine allows Cross Site Request Forgery.This issue affects AI Engine: from n/a through 3.8.8.” Source