What is the CVSS score of CVE-2026-2955?

CVE-2026-2955 has a CVSS 3.1 base score of 6.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

AIWU AI Chatbot CVE-2026-2955

EUVD-2026-31064 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-05-20 Wordfence

GHSA-8cp2-f533-qp29

WordPress XSS

6.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

May 20, 2026 - 07:01 vuln.today

DescriptionCVE.org

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-Forwarded-For' header in versions up to, and including, 1.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: Practical exploitation is constrained due to a 20-character storage limit.

AnalysisAI

Stored Cross-Site Scripting in the AI Chatbot & Workflow Automation by AIWU WordPress plugin (versions ≤1.4.14) allows injection of arbitrary web scripts via the unsanitized X-Forwarded-For HTTP request header. The injected payload persists server-side and executes in the browser of any user who accesses an affected page, enabling session hijacking, credential theft, or malicious redirects. No public exploit has been identified at time of analysis, and no CISA KEV listing exists, though practical exploitation is further constrained by a 20-character storage limit on the injected value.

Technical ContextAI

CWE-79 (Improper Neutralization of Input During Web Page Generation - XSS) describes the root cause: the plugin reads the X-Forwarded-For HTTP header supplied by the client, stores it without sanitization, and later renders it in page output without HTML encoding, creating a classic stored XSS sink. The affected product is identified by CPE cpe:2.3:a:wupsales:ai_chatbot_&_workflow_automation_by_aiwu as published on the WordPress plugin repository under the slug ai-copilot-content-generator. The X-Forwarded-For header is a well-known injection vector in web applications that log or display client IP metadata, because it is entirely attacker-controlled and is not validated by intermediate infrastructure. The 20-character storage ceiling is a mitigating implementation detail that substantially limits payload complexity - full script tags, event handlers, or redirect payloads must be crafted to fit within this constraint, typically requiring chaining techniques such as referencing externally hosted scripts via short URLs or exploiting browser-specific shorthand syntax.

RemediationAI

The primary remediation is to update the AI Chatbot & Workflow Automation by AIWU plugin to the version that incorporates changeset 3505998 from the WordPress plugin SVN repository (https://plugins.trac.wordpress.org/changeset/3505998/ai-copilot-content-generator); however, the exact patched release version number is not confirmed from available data - check the plugin's changelog in the WordPress plugin directory for the release incorporating this changeset and update to it. Site administrators should use the WordPress admin dashboard or WP-CLI to apply the update immediately. As a compensating control pending update, consider deploying a Web Application Firewall (WAF) rule - Wordfence Premium users may already have a rule covering this CVE - to block or sanitize requests with suspicious X-Forwarded-For header values; note that aggressive WAF rules on this header may interfere with legitimate proxy or CDN infrastructure that sets it. If the chatbot feature is not actively used, temporarily deactivating the plugin eliminates the attack surface entirely with no functional side effects until a confirmed patched version is available.