CVE-2026-65581 in AI ANN Plugin
Summary
by MITRE • 08/06/2026
Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/06/2026
This vulnerability represents a critical security flaw in the AI Artificial Neural Network plugin version 1.29.0 and earlier, where unauthenticated remote code execution can occur through PHP object injection attacks. The vulnerability stems from inadequate input validation and sanitization within the plugin's handling of serialized data, specifically when processing user-supplied parameters that are later unserialized without proper security measures. Attackers can exploit this by crafting malicious serialized objects that, when processed by the vulnerable plugin, trigger arbitrary code execution on the target server.
The technical implementation involves the use of PHP's unserialize() function without appropriate security controls, creating a pathway for attackers to inject malicious objects that can manipulate the application's behavior. This flaw falls under CWE-502 which specifically addresses deserialization of untrusted data as a source of vulnerability. The vulnerability is particularly dangerous because it does not require authentication, meaning any remote user can potentially exploit it without prior access credentials. This creates an immediate threat to systems running vulnerable versions where the plugin is installed and active.
The operational impact of this vulnerability extends beyond simple code execution to encompass complete system compromise. Attackers can leverage this vulnerability to establish persistent backdoors, exfiltrate sensitive data, modify system files, or use the compromised server as a launch point for further attacks within the network infrastructure. The attack surface is particularly broad since WordPress plugins often have extensive access to server resources and database connections, making each vulnerable instance a potential entry point for larger-scale breaches. This vulnerability aligns with ATT&CK technique T1505.003 which covers Web Shell deployment through deserialization vulnerabilities.
Mitigation strategies must address both immediate patching requirements and broader security enhancements. Organizations should immediately upgrade to the latest version of the AI ANN plugin where this vulnerability has been resolved through proper input validation and sanitization of serialized data. Additionally, implementing proper PHP configuration settings such as disabling dangerous functions like unserialize() when possible, using secure serialization practices, and employing web application firewalls that can detect and block malicious serialized object patterns. The security posture should also include regular vulnerability scanning, monitoring for unauthorized plugin installations, and implementing principle of least privilege access controls to minimize potential damage from successful exploitation attempts.