EUVD-2026-54746
GHSA-gjfv-xm8w-qq69
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessFind WordPress site with [aiwu-form]/chatbot page
-
DeliveryRead exposed WAIC_DATA.waicNonce from page source
-
ExploitSubmit workflow with wp_create_user role=administrator
-
ExecutionPlugin saves and executes malicious workflow
-
PersistAdministrator account created
-
ImpactLog in and take over site
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2025 - Insecure Design
ASVS 5.0
V8 - Authorization Least privilege enforcement
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires that a frontend page on the target site render the [aiwu-form] shortcode or the public chatbot, because that is what causes the plugin (assets.php/frame.php) to emit the waic-nonce into the public WAIC_DATA.waicNonce JavaScript object; with that nonce readable, an unauthenticated attacker can save and execute a workflow whose wp_create_user action node sets role=administrator. No authentication, user interaction, or special privileges are needed (PR:N/UI:N), and the CVSS vector is AV:N/AC:L. The primary limiting factor is deployment configuration: sites running the plugin but not exposing the shortcode or public chatbot on any frontend page do not leak the nonce and are not remotely exploitable via this path; the plugin must be at version 1.5.6 or earlier. |
| Impact | All signals point to genuinely high real-world risk where the plugin is exposed: the CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (9.8) is fully consistent with the described unauthenticated, no-interaction path to administrator creation, and the impact (full site takeover) is maximal for a WordPress site. The distinguishing factor is not raw CVSS but exposure: exploitation requires a page rendering the [aiwu-form] shortcode or public chatbot to be reachable, which is a normal deployment for this plugin, so the practical attack surface is broad on installed sites. No EPSS score, KEV entry, or public POC was provided, so this is not confirmed as actively exploited - but the low complexity and public nonce make weaponization straightforward if details are published. No conflicting signals were identified; the description and CVSS vector agree that this is unauthenticated and remotely exploitable. |
| Exploit ScenarioDerived | An attacker browses to a victim WordPress site that displays the [aiwu-form] or public chatbot, reads the exposed WAIC_DATA.waicNonce from the page source, and replays it to the workflow controller to save and execute a workflow containing a wp_create_user action node with role=administrator. Within a single unauthenticated request sequence the attacker gains an administrator login and full control of the site, enabling plugin/theme editing, PHP webshell upload, and persistence. No public POC was provided, but the low attack complexity makes independent development trivial. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Aug 08, 2026
Unauthenticated privilege escalation to full site takeover in the AI Copilot - Content Generator plugin for WordPress (all versions through 1.5.6) lets remote attackers create an administrator account by saving and executing a malicious workflow whose wp_create_user action node specifies role=administrator. The plugin's only authorization barrier is a waic-nonce that is publicly emitted into frontend JavaScript (WAIC_DATA.waicNonce) on any page rendering the [aiwu-form] shortcode or public chatbot, so the nonce check provides no real protection. Reported by Wordfence with CVSS 9.8; no public exploit identified at time of analysis, but exploitation is trivial once the shortcode or chatbot is on a public page.
RemediationAI
No fixed version was provided in the source data, so no vendor-released patch is identified at time of analysis - monitor the Wordfence advisory (https://www.wordfence.com/threat-intel/vulnerabilities/id/e28ae1a3-abc6-484c-abc7-1e0b958fa30b?source=cve) and the plugin changelog for a release above 1.5.6 and upgrade immediately when available. As the most effective compensating control, deactivate and remove the AI Copilot - Content Generator plugin until a patched version ships, since the vulnerability is in shipped code. If it cannot be removed, remove the [aiwu-form] shortcode and any public chatbot from all frontend pages so the waic-nonce is no longer emitted publicly and the workflow endpoint is not reachable unauthenticated (trade-off: this disables the plugin's public form/chatbot functionality). Additionally, apply a WAF rule to block requests to the workflow save/execute controller endpoints and request bodies containing wp_create_user or role=administrator, and audit wp_users for unexpected recently created administrator accounts, revoking any unrecognized ones (trade-off: WAF signatures can be bypassed and are a stopgap, not a fix).
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The affected software is a WordPress plugin (CPE cpe:2.3:a:wupsales:ai_copilot_-_content_generator) providing AI-driven content generation, front-end forms via the [aiwu-form] shortcode, and a chatbot backed by a 'workflow' engine with pluggable action nodes. The root cause is CWE-269 (Improper Privilege Management): the workflow controller (modules/workflow/controller.php around lines 39 and 86) gates save/execute operations only on a WordPress nonce, and the wp_create_user action node (modules/workflow/blocks/actions/wp_create_user.php line 107) assigns any requested role, including administrator, without verifying the requester's capabilities. Because assets.php (line 96) and frame.php (line 211) print the waic-nonce into a publicly readable WAIC_DATA.waicNonce JavaScript object whenever the form/chatbot renders on the frontend, the nonce is not secret and cannot serve as an authorization control - WordPress nonces are CSRF/replay mitigations, not capability checks, and are misused here as the sole authorization gate.
Know when Wordpress Plugin gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated remote request creates an admin account with no interaction (PR:N/UI:N/AC:L), yielding full confidentiality, integrity, and availability compromise of the WordPress site.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
DescriptionCVE.org
The AI Copilot - Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to create a new administrator-level user account and achieve full site takeover by saving and executing a malicious workflow containing a wp_create_user action node specifying role=administrator. This vulnerability is exploitable by unauthenticated attackers on any site where the [aiwu-form] shortcode or public chatbot is rendered on a frontend page, as the waic-nonce value is emitted into publicly accessible JavaScript (WAIC_DATA.waicNonce) on those pages, rendering the nonce check a non-functional authorization barrier.
Articles & Coverage 1
Executive ViewAI
The AI Copilot - Content Generator WordPress plugin (all versions through 1.5.6) contains a critical vulnerability allowing unauthenticated remote attackers to create administrator accounts and achieve complete site takeover. Any WordPress installation with this plugin displaying the [aiwu-form] shortcode or public chatbot is at immediate risk of compromise; attackers can inject malware, extract sensitive data, or hold the site for ransom without requiring legitimate credentials or sophisticated exploitation techniques. This vulnerability poses severe organizational risk and requires immediate action within hours, not days.
Deactivate and remove the plugin immediately. Deploy Web Application Firewall rules blocking access to [aiwu-form] shortcode and chatbot endpoints. Enforce multi-factor authentication on all administrator accounts. Monitor WordPress user logs for unexpected account creation events. Implement intrusion detection signatures flagging wp_create_user function calls from unauthenticated sources. Conduct forensic review of access logs during the exposure period to identify potential exploitation.
Threat Intelligence Overview
NVD
CVE.org
EPSS
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.
More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The AI Engine WordPress plugin through version 3.1.3 exposes Bearer Token values through the /mcp/v1/ REST API endpoint
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Exploit-DB