AI Copilot – Content Generator WordPress Plugin Authorization Bypass to Site Takeover

Technical Analysis

CVE-2026-14526 (CVSS 9.8) affects the AI Copilot – Content Generator plugin for WordPress through version 1.5.6, where workflow execution logic fails to properly validate user authorization before executing sensitive action nodes. Attackers can craft and execute a malicious workflow containing a wp_create_user action node with role=administrator, exploiting the fact that the waic-nonce value (WAIC_DATA.waicNonce) is emitted directly into public-facing JavaScript on any page rendering the plugin's shortcode or chatbot interface, defeating the intended nonce-based CSRF/authorization protection. This is a pre-authentication, no-user-interaction attack chain leading to full administrative site compromise, likely followed by webshell upload, malicious plugin installation, or content injection. Since this plugin is explicitly an AI-powered content generation and chatbot tool embedded in WordPress sites, organizations using it as part of an AI agent or automated content pipeline (e.g., agent-driven publishing, chatbot-based customer interaction, or workflow automation with LLM backends) face direct exposure — a compromised site could be leveraged to exfiltrate API keys, hijack the chatbot's LLM integration, or serve as a foothold for further supply-chain-style attacks against downstream automation consuming site content.

Affected Systems

WordPress sites running the 'AI Copilot – Content Generator' plugin, versions up to and including 1.5.6, specifically any site rendering the [aiwu-form] shortcode or the plugin's public chatbot widget on frontend pages

Indicators of Compromise

• No specific hashes/IPs/domains published; indicators to monitor include: unexpected new administrator-level WordPress user accounts, unauthorized workflow definitions containing wp_create_user action nodes, anomalous requests referencing WAIC_DATA.waicNonce, unexpected POST requests to plugin workflow-execution endpoints (e.g., admin-ajax.php actions tied to 'aiwu' or 'waic' namespaces)

Remediation Steps

1. 1

   Update the plugin immediately

   Upgrade AI Copilot – Content Generator to a patched version beyond 1.5.6 as soon as the vendor releases a fix; if no patch exists, disable/remove the plugin until one is available.

2. 2

   Disable public-facing chatbot/shortcode

   Temporarily remove the [aiwu-form] shortcode and public chatbot widget from frontend pages to eliminate the exposed nonce attack surface.

3. 3

   Audit administrator accounts

   Review all WordPress user accounts for unauthorized or unexpected administrator-level users created recently, and remove any suspicious accounts.

4. 4

   Review workflow configurations

   Inspect any saved plugin workflows for unauthorized wp_create_user or other privileged action nodes and delete malicious workflows.

5. 5

   Rotate credentials and API keys

   Rotate WordPress admin credentials, API keys, and any secrets accessible to the plugin or connected AI/LLM services, given potential exposure from site compromise.

6. 6

   Enable WAF rules

   Deploy web application firewall rules to block anomalous requests to plugin workflow-execution endpoints until patched.