Wupsales Ai Copilot Content Generator vulnerabilities

CVE-2026-6639 [HIGH] CWE-862 CVE-2026-6639: The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Informa The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6. This is due to the `getCurrentTaskResults()` method in `modules/workspace/controller.php` being accessible without authentication or authorization checks. The method is not included in the workspa

CVE-2026-14526 [CRITICAL] CWE-269 CVE-2026-14526: The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to create a new administrator-level user account and achieve

CVE-2026-13009 [MEDIUM] CWE-89 CVE-2026-13009: The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via ' The AI Copilot – Content Generator plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subs

CVE-2026-6804 [MEDIUM] CWE-862 CVE-2026-6804: The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization byp The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.4.12. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to publish draft WordPress posts, exposing unpublishe

CVE-2026-6803 [MEDIUM] CWE-862 CVE-2026-6803: The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authoriza The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.12. This is due to missing capability checks and nonce verification on AJAX actions registered under both wp_ajax_ and wp_ajax_nopriv_ hooks, as the base controller's getPermissions() returns an empty array