# CVE-2026-12510: Jordy Meow AI Engine IDOR in Chatbot Discussions

Source: https://junglewise.ai/threats/cve-2026-12510-jordy-meow-ai-engine-idor-in-chatbot-discussions  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-16. Updated: 2026-07-16  
License: CC BY 4.0 with a link back

CVE-2026-12510 · Severity: info · CVSS 5.9 · Published 2026-07-16

The AI Engine plugin for WordPress, which adds AI chatbot capabilities to websites, contains a security flaw in its discussion management feature. An attacker with a basic user account can exploit this to view private chat histories of other users or take control of their conversation records. This could lead to the exposure of sensitive information shared between customers and the AI chatbot.

Technologies: [Meow Apps AI Engine](https://junglewise.ai/threats/technologies/ai-engine). Vendors: [Meow Apps](https://junglewise.ai/threats/vendors/meow-apps).

## Quick answers

**Is CVE-2026-12510 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-12510 being exploited in the wild.

**How severe is CVE-2026-12510?** Informational severity, with a CVSS score of 5.9, published 16 July 2026.

**Which products and versions are affected?** Meow Apps AI Engine < 3.5.5.

**Is there a fix for CVE-2026-12510?** A patch was published on 2026-06-25: Fixed in version 3.5.5 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-12510 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-12510?** Check whether you run Meow Apps AI Engine at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An Insecure Direct Object Reference (IDOR) vulnerability exists in the AI Engine plugin's REST API endpoints for chatbot discussions. The plugin fails to validate ownership of a 'chatId' when a user submits a new message or requests a discussion list. A logged-in user with Subscriber-level permissions can provide a victim's chatId in a request to the '/mwai-ui/v1/chats/submit' endpoint, which reassigns the conversation owner to the attacker. Subsequently, the attacker can view the full chat history via the '/mwai-ui/v1/discussions/list' endpoint. This vulnerability requires the 'Discussions' feature to be enabled and knowledge of the target chatId. The issue is fixed in version 3.5.5.

## Affected products

- Jordy Meow AI Engine < 3.5.5

## Timeline

- 2026-06-25: disclosed: Public disclosure by WPScan
- 2026-06-25: patched: Fixed in version 3.5.5
- 2026-07-16: advisory: NVD publication date

## References

- [https://wpscan.com/vulnerability/b7825c8a-1817-4a17-b641-076e48ac7c2e/](https://wpscan.com/vulnerability/b7825c8a-1817-4a17-b641-076e48ac7c2e/)

## Related threats

- [Meow Apps AI Engine stored cross-site scripting](https://junglewise.ai/threats/cve-2026-123478-improper-neutralization-of-input-during-web-page-generation)
- [Meow Apps AI Engine CSRF vulnerability](https://junglewise.ai/threats/cve-2026-65566-cross-site-request-forgery-csrf-vulnerability-in-meow-apps-ai)
- [Meow Apps AI Engine broken access control in WordPress](https://junglewise.ai/threats/cve-2026-112828-missing-authorization-vulnerability-in-meow-apps-ai-engine-ai)
- [Meow Apps AI Engine broken access control](https://junglewise.ai/threats/cve-2026-110888-missing-authorization-vulnerability-in-meow-apps-ai-engine-ai)
- [Meow Apps AI Engine IDOR vulnerability](https://junglewise.ai/threats/cve-2026-93623-unauthenticated-insecure-direct-object-references-idor-in-ai)