AI Puffer CVE-2026-104741

Exploitation requires two concrete conditions: (1) the attacker must hold an authenticated account at subscriber level or above (PR:L), and (2) a site administrator must have explicitly granted 'sources' module access to that lower-privileged role through the plugin's Role Manager - a non-default configuration. Against default installations the flaw is not exploitable, which is the primary limiting factor and the reason for the high attack complexity. When the condition is met, the affected endpoints modify the global options aipkit_training_general_settings and aipkit_indexing_field_settings (chunking parameters, file upload visibility, per-CPT field indexing), impacting all plugin users on the site; impact is limited to configuration integrity, with no data disclosure or availability loss.

This is a genuinely low-priority issue, and the signals are consistent rather than conflicting. The provided CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N, base 3.1 LOW) correctly reflects a narrow, low-impact flaw: network-reachable but high-complexity, requiring existing authentication (PR:L, subscriber-level or above), with only limited integrity impact (C:N/I:L/A:N) - attackers can tamper with global indexing/vector-search configuration but cannot read data or disrupt availability. The AC:H rating is driven by a hard precondition: the attack only works if an administrator has non-default-configured the plugin's Role Manager to grant 'sources' module access to a lower-privileged role, so most deployments are not exploitable at all. No EPSS score was provided in the input, there is no CISA KEV listing, and no public exploit code was identified at time of analysis - so there is no evidence of active or likely exploitation. Classification source code lines are referenced by Wordfence, but a reference to vulnerable code is not the same as a weaponized POC. Net: a real but minor authorization-bypass bug, appropriately scored LOW, not a patch-now emergency; prioritize routine plugin updating rather than emergency response.

In a site where an administrator has used the plugin's Role Manager to grant 'sources' module access to subscribers (or another low-privileged role), an authenticated subscriber sends a crafted AJAX request to the plugin's settings handlers and overwrites global indexing and vector-search options (chunking parameters, file upload visibility, per-CPT field indexing) for all users. No public exploit code was identified at time of analysis; the high attack complexity stems from the non-default Role Manager configuration that must already be in place.