Artificial Intelligence Project Artificial Intelligence — known CVE vulnerabilities

Every CVE whose affected-product data names Artificial Intelligence Project Artificial Intelligence, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-31677 — CVSS 8.8 (high): Cross-Site Request Forgery (CSRF) vulnerability in Drupal AI (Artificial Intelligence) allows Cross Site Request Forgery.This issue affects…
• CVE-2025-31678 — CVSS 8.2 (high): Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing.This issue affects AI (Artificial…
• CVE-2026-3573 — CVSS 7.5 (high): Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial…
• CVE-2015-9501 — CVSS 6.1 (medium): The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web…
• CVE-2025-13981 — CVSS 4.4 (medium): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence)…