Artificial Intelligence Project Artificial Intelligence vulnerabilities
11 vulnerabilities
Known vulnerabilities in Artificial Intelligence Project Artificial Intelligence, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-9501artificial_intelligence_projectartificial_intelligence+1
EPSS score0.98%
The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.CVE-2025-13981artificial_intelligence_projectartificial_intelligence+1EPSS score0.14%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.7, from 1.1.0 before 1.1.7, from 1.2.0 before 1.2.4.CVE-2025-31678artificial_intelligence_projectartificial_intelligence+1EPSS score0.37%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.CVE-2025-31692artificial_intelligence_projectartificial_intelligence+1EPSS score0.76%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.CVE-2025-31693artificial_intelligence_projectartificial_intelligence+1EPSS score0.74%
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.5.CVE-2025-31677artificial_intelligence_projectartificial_intelligence+1EPSS score0.22%
Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.CVE-2026-13237artificial_intelligence_projectartificial_intelligence+1EPSS score0.22%
Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.CVE-2026-13235artificial_intelligence_projectartificial_intelligence+1EPSS score0.21%
Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.CVE-2026-13236artificial_intelligence_projectartificial_intelligence+1EPSS score0.19%
Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing. This issue affects AI Agents versions: from 0.0.0 to 1.1.4, from 1.2.0 to 1.2.5, from 1.3.0 to 1.3.1.CVE-2026-13234artificial_intelligence_projectartificial_intelligence+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS). This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.2.17, from 1.3.0 to 1.3.8, from 1.4.0 to 1.4.3.CVE-2026-3573artificial_intelligence_projectartificial_intelligence+1EPSS score0.39%
Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.