Artificial Intelligence Project

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Artificial Intelligence Project records in CISA KEV

No Artificial Intelligence Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Artificial Intelligence 11 records MEDIUM

Records

11 records in Artificial Intelligence · all components

TI-2025-22822 CVE-2025-31678 · GHSA-c8q6-wp7v-46r9

AI (Artificial Intelligence) - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-004

MEDIUM 42

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.0.3.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00381 Published 2025-03-31 Fixed in 1.0.3 CWE-862

TI-2025-22821 CVE-2025-31677 · GHSA-9w85-x5hg-fr66

AI (Artificial Intelligence) - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-003

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects AI (Artificial Intelligence): from 1.0.0 before 1.0.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2025-03-31 Fixed in 1.0.2 CWE-352

TI-2026-03082 CVE-2026-3573 · GHSA-99mr-fjvp-4w9w

AI (Artificial Intelligence) - Moderately critical - Information Disclosure - SA-CONTRIB-2026-028

LOW 38

Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, from 1.2.0 before 1.2.12.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00241 Published 2026-03-26 Fixed in 1.1.11, 1.2.12 CWE-863

TI-2025-22836 CVE-2025-31692 · GHSA-pwjq-fx3v-8f9r

AI (Artificial Intelligence) - Critical - Remote Code Execution - SA-CONTRIB-2025-021

LOW 36

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (Artificial Intelligence) allows OS Command Injection.This issue affects AI (Artificial Intelligence):…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00774 Published 2025-03-31 Fixed in 1.0.5 CWE-78

TI-2025-22837 CVE-2025-31693 · GHSA-vx9m-rfxq-gr74

AI (Artificial Intelligence) - Moderately critical - Gadget Chain - SA-CONTRIB-2025-022

LOW 33

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0076 Published 2025-03-31 Fixed in 1.0.5 CWE-78

TI-2015-07878 CVE-2015-9501 · GHSA-wfhp-qmf5-xqg5

The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons…

LOW 29

The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2019-10-22 No fix listed CWE-79

TI-2026-11238 CVE-2026-13234 · GHSA-q48q-x876-9gr8

AI (Artificial Intelligence) - Moderately critical - Information Disclosure / Cross-site Scripting - SA-CONTRIB-2026-054

LOW 27

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00253 Published 2026-07-10 Fixed in 1.2.17, 1.3.8 +1 CWE-79

TI-2026-11241 CVE-2026-13237 · GHSA-7c7x-54hv-3m8c

AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057

LOW 21

Incorrect Authorization vulnerability in Drupal AI Agents allows Forceful Browsing.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00217 Published 2026-07-10 Fixed in 1.1.4, 1.2.5 +1 CWE-863

TI-2026-11240 CVE-2026-13236 · GHSA-vqr6-3h85-q7hp

AI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056

LOW 19

Missing Authorization vulnerability in Drupal AI Agents allows Forceful Browsing.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00188 Published 2026-07-10 Fixed in 1.1.4, 1.2.5 +1 CWE-862

TI-2025-12776 CVE-2025-13981 · GHSA-3p56-grmc-2fxh

AI (Artificial Intelligence) - Moderately critical - Cross-Site Scripting - SA-CONTRIB-2025-119

LOW 19

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Cross-Site Scripting (XSS).This issue affects AI (Artificial Intelligence):…

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00143 Published 2026-01-28 Fixed in 1.0.7, 1.1.7 +1 CWE-79

TI-2026-11239 CVE-2026-13235 · GHSA-4c7f-qhrm-6jc8

AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-055

LOW 15

Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00208 Published 2026-07-10 Fixed in 1.2.17, 1.3.8 +1 CWE-862

Open these records in search →