AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure

AIWU AI Chatbot & Workflow Automation WordPress plugin = 1.4.6 contains a sensitive information exposure caused by unauthenticated access to getCurrentTaskResults method, letting unauthenticated attackers retrieve API keys and configuration data, exploit requires no authentication. id:...

CVE-2026-85118

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

CVE-2026-85118

The AI Content Generator Marketing WordPress plugin (versions through 1.0.0 ) is vulnerable to unauthenticated privilege escalation. The root cause is a failure to enforce nonce or capability checks on specific AJAX actions , which allows unauthenticated users to update or delete arbitrary WordPr...

EUVD-2026-96763

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

CVE-2026-85118 AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

PT-2026-110037

Name of the Vulnerable Software and Affected Versions AI Content Generator Marketing WordPress plugin version 1.0.0 Description Certain AJAX actions fail to enforce a nonce a unique token used to prevent cross-site request forgery or capability checks. This allows unauthenticated users to update ...

CVE-2026-85118: Improper Privilege Management

The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update and delete arbitrary WordPress options, which can be used to gain administrator access to the site...

CVE-2026-39763

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

EUVD-2026-92394

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

CVE-2026-39763 WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

CVE-2026-39763

The WP Dummy Content Generator plugin for WordPress (versions n/a through 4.0.0 ) is vulnerable to a Broken Access Control issue. Specifically, it suffers from Missing Authorization (CWE-862), allowing attackers to exploit Incorrectly Configured Access Control Security Levels . While the base sev...

CVE-2026-39763 WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

WordPress WP Dummy Content Generator plugin <= 4.0.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by longnv719 in WordPress Plugin WP Dummy Content Generator versions = 4.0.0...

PT-2026-104800

Name of the Vulnerable Software and Affected Versions WP Dummy Content Generator versions prior to 4.0.1 Description A missing authorization issue exists in the wp-dummy-content-generator plugin, which allows the exploitation of incorrectly configured access control security levels. This is a...

CVE-2026-39763: Missing Authorization

Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Dummy Content Generator: from n/a through 4.0.0...

CVE-2026-14526

The AI Copilot – Content Generator plugin for WordPress is affected by an authorization bypass vulnerability in all versions up to and including 1.5.6. The issue arises because the plugin does not properly verify a user’s authorization to perform certain actions, enabling unauthenticated attacker...

CVE-2026-14526: Improper Privilege Management

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to creat...

WordPress AI Copilot – Content Generator plugin <= 1.4.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Kazuma Matsumoto in WordPress Plugin AIWU versions = 1.4.6...

PT-2026-68534

Name of the Vulnerable Software and Affected Versions AI Copilot – Content Generator versions prior to 1.5.7 Description An issue exists that allows unauthenticated attackers to elevate their privileges to those of an administrator. Recommendations Update to a version newer than 1.5.6...

WordPress AI Copilot – Content Generator plugin <= 1.5.4 - Authenticated (Subscriber+) SQL Injection vulnerability

Authenticated Subscriber+ SQL Injection vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin AIWU versions = 1.5.4...