Artificial Intelligence Project vulnerabilities
11 vulnerabilities
Known vulnerabilities in Artificial Intelligence Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Artificial Intelligence11 vulnerabilities
CVE-2015-9501artificial_intelligence_projectartificial_intelligence+1
EPSS score0.98%
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.CVE-2025-13981artificial_intelligence_projectartificial_intelligence+1EPSS score0.14%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4.CVE-2025-31678artificial_intelligence_projectartificial_intelligence+1EPSS score0.37%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.CVE-2025-31692artificial_intelligence_projectartificial_intelligence+1EPSS score0.76%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.CVE-2025-31693artificial_intelligence_projectartificial_intelligence+1EPSS score0.74%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.CVE-2025-31677artificial_intelligence_projectartificial_intelligence+1EPSS score0.22%
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.CVE-2026-13237artificial_intelligence_projectartificial_intelligence+1EPSS score0.22%
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.CVE-2026-13235artificial_intelligence_projectartificial_intelligence+1EPSS score0.21%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.CVE-2026-13236artificial_intelligence_projectartificial_intelligence+1EPSS score0.19%
Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.CVE-2026-13234artificial_intelligence_projectartificial_intelligence+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.CVE-2026-3573artificial_intelligence_projectartificial_intelligence+1EPSS score0.39%
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.