EUVD-2026-43144
GHSA-62q4-whmm-v2fm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify WordPress site with AI Copilot plugin active
-
DeliverySend unauthenticated HTTP request to workspace controller endpoint
-
ExploitSupply enumerated or guessed scenario ID
-
ExecutionBypass missing authorization check
-
ImpactPublish confidential draft content or unpublish live posts
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The AI Copilot - Content Generator plugin must be installed and activated on the target WordPress site (versions up to and including 1.4.12). No authentication, no special role, and no user interaction are required - the CVSS vector PR:N/UI:N/AV:N confirms this. The attacker must supply a valid scenario ID that corresponds to an existing workflow, which may require enumeration; however, scenario IDs are not treated as secrets by the plugin. The specific exploitable actions are limited to toggling WordPress post publication state (publish draft → live, or unpublish live → draft) - arbitrary code execution, file system access, and credential theft are not achievable via this vector. Exploitation is bounded to WordPress post objects managed by the plugin's workspace module and does not extend to other site components. |
| Impact | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N scores 5.3 Medium, but this vector appears to understate the actual impact. The description explicitly identifies two consequences - exposure of unpublished draft content (a confidentiality breach, C:N seems incorrect) and disruption to live published content via forced unpublishing (an availability impact, A:N also seems incorrect). Independent assessment elevates the vector to C:L/I:L/A:L. No EPSS data was provided, and the absence of KEV listing and public POC suggests no active campaigns at time of analysis. However, SSVC signals are concerning: the attack is automatable (AV:N/AC:L/PR:N), requires no user interaction, and has a partial technical impact across confidentiality, integrity, and availability. For WordPress sites hosting sensitive pre-publication content (embargoed news, product launches), the real-world risk of draft exposure is meaningfully higher than the CVSS score implies. EPSS data missing - risk quantification from probability models is not available. |
| Exploit ScenarioDerived | An unauthenticated attacker enumerates a WordPress site running the AI Copilot - Content Generator plugin and submits crafted HTTP POST requests to the workspace controller endpoint, cycling through guessable or enumerable scenario IDs. With no authentication check in place, the controller executes the associated publish or unpublish action: the attacker either pulls confidential draft posts into public view or takes a live site's published pages offline en masse. No public POC has been identified, but the vulnerability's straightforward nature - a missing capability check against an openly accessible endpoint - makes it independently reproducible from the Wordfence advisory alone. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 11, 2026
Authorization bypass in the AI Copilot - Content Generator WordPress plugin (by wupsales/AIWU) allows unauthenticated remote attackers to manipulate WordPress post publication states across all versions through 1.4.12. By supplying arbitrary scenario IDs to the plugin's workspace controller endpoint - which lacks any authorization verification - attackers can expose unpublished draft content or take live published posts offline, causing content disclosure and service disruption. No public exploit or CISA KEV listing has been identified at time of analysis, though the trivial exploitation complexity (AV:N/AC:L/PR:N/UI:N) makes independent rediscovery straightforward.
RemediationAI
An upstream fix has been committed to the plugin's WordPress.org repository (changeset: https://plugins.trac.wordpress.org/changeset?reponame=&old=3582369%40ai-copilot-content-generator&new=3582369%40ai-copilot-content-generator); however, an exact tagged patched release version is not independently confirmed from available data - update to any version above 1.4.12 once available in the WordPress plugin repository and verify the version in your dashboard. If an immediate update is not possible, deactivate the plugin entirely to eliminate the attack surface - this is the most effective compensating control since the vulnerable endpoints are only reachable when the plugin is active. As a secondary control, deploy a WAF with WordPress-aware rules (e.g., Wordfence Firewall) to block unauthenticated requests matching the workspace controller's endpoint pattern, though this is not a substitute for patching. Restricting wp-admin and plugin REST endpoints via network-level controls to known IPs can further reduce exposure for internal-only workflows.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
This vulnerability resides in a WordPress plugin identified by CPE cpe:2.3:a:wupsales:ai_copilot_-_content_generator:*:*:*:*:*:*:*:* - an AI-powered chatbot and workflow automation plugin marketed under the AIWU brand. The root cause is CWE-862 (Missing Authorization): the plugin's workspace controller (modules/workspace/controller.php, lines 9, 130, 141) and its frame handler (classes/frame.php, line 283) process scenario IDs submitted via HTTP requests without verifying whether the requesting user holds any WordPress capability to alter post states. WordPress's native capability system (e.g., publish_posts, edit_published_posts) is bypassed entirely. The scenario ID mechanism - intended to automate content workflows - becomes an open, unauthenticated content state toggle.
Know when Wordpress Plugin gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Draft post exposure constitutes C:L and forced unpublishing causes A:L; PR:N confirmed by both CVSS vector and description's explicit 'unauthenticated attackers' language.
Primary rating from Vendor (Wordfence).
CVSS VectorVendor: Wordfence
DescriptionCVE.org
The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to publish draft WordPress posts, exposing unpublished content, or unpublish live content, causing service disruption, by supplying arbitrary scenario IDs.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Related Vulnerabilities in AI Chatbot & Workflow Automation by AIWU Authorization Flaws
View all 2More in Wordpress Plugin
View allThe Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1
The Hash Form - Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing fil
Authentication bypass in the LiteSpeed Cache WordPress plugin (versions prior to 6.5.0.1) allows unauthenticated remote
The Simple File List plugin for WordPress through version 4.2.2 contains an unauthenticated remote code execution vulner
The AI Engine WordPress plugin through version 3.1.3 exposes Bearer Token values through the /mcp/v1/ REST API endpoint
The SureTriggers WordPress plugin through version 1.0.82 contains a privilege escalation vulnerability that allows unaut
The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via
The Business Directory Plugin - Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based
SQL injection in the NotificationX WordPress plugin (versions up to and including 2.8.2) allows unauthenticated remote a
The POST SMTP Mailer - Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress plugin for WordPress i
The MasterStudy LMS WordPress Plugin - for Online Courses and Education plugin for WordPress is vulnerable to union base
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the ‘hash’ parameter in
Exploit-DB