Artificial Intelligence Project Artificial Intelligence vulnerabilities

11 vulnerabilities

Known vulnerabilities in Artificial Intelligence Project Artificial Intelligence, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2015-9501artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.98%
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.
4.4CVE-2025-13981artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.14%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4.
8.2CVE-2025-31678artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.37%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.
7.5CVE-2025-31692artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.76%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.
6.6CVE-2025-31693artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.74%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.
8.8CVE-2025-31677artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.22%
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.
4.8CVE-2026-13237artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.22%
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.
3.3CVE-2026-13235artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.21%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.
4.2CVE-2026-13236artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.19%
Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.
6.1CVE-2026-13234artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.
7.5CVE-2026-3573artificial_intelligence_projectartificial_intelligence+1
EPSS score
0.39%
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.