CVE-2026-15988 | tigroumeow AI Engine Plugin up to 3.6.5 on WordPress REST users endpoint reauth_for_authorize cross-site request forgery

A vulnerability, which was classified as problematic, was found in tigroumeow AI Engine Plugin up to 3.6.5 on WordPress. Affected by this vulnerability is the function reauth_for_authorize of the component REST users endpoint. Executing a manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2026-15988. The attack may be performed from remote. There is no available exploit.