WordPress security changelog
HIGH CVE-2026-6639 Deferred

AI Copilot task enumeration exposes OpenAI API keys and prompts

AI Copilot – Content Generator through 1.4.6 registers controller methods for unauthenticated AJAX access, omits getCurrentTaskResults() from getNoncedMethods(), and inherits an empty permission requirement. Task parameters created by features such as Bulk Post Generator are stored in the database, and an unauthenticated attacker can enumerate sequential task IDs to retrieve plaintext OpenAI API keys, prompts, keywords and model configuration. The CNA does not disclose the AJAX action or task-ID parameter name.

CVE / CNA score 7.5 CVSS 3.1 · security@wordfence.com
NVD score Pending NVD has not published its own CVSS assessment.
Component
AI Copilot – Content Generator
Plugin slug
ai-copilot-content-generator
Affected
<= 1.4.6
Safe version
> 1.4.6
Published
Aug 05, 2026
Weakness
CWE-862 — Missing Authorization

This CVE was published Aug 05, 2026 and is one of 9 known issues for this plugin.

What to do

Update, patch or deactivate.

Update AI Copilot – Content Generator to a release after 1.4.6. The authoritative record links a trunk correction but does not identify the first fixed release. Revoke and replace exposed OpenAI keys and review task access and API usage for abuse.

A safe version is available, so updating to that version or later is the preferred remediation. If an immediate update is not practical, consider a targeted application patch or temporarily restricting the affected functionality.

Deactivate only when warranted by your risk profile, or when advised by your hosting provider in the limited circumstances where the vulnerability cannot otherwise be mitigated. If you’re unsure which action is appropriate, contact Fused or your hosting provider for guidance.

Source record

Technical description

The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6. This is due to the `getCurrentTaskResults()` method in `modules/workspace/controller.php` being accessible without authentication or authorization checks. The method is not included in the workspace controller's `getNoncedMethods()` array, the base `getPermissions()` returns an empty array, and all AJAX actions are registered with `wp_ajax_nopriv_` hooks (`classes/frame.php:282`). When tasks are created via features like the Bulk Post Generator, the task parameters — including the OpenAI API key in plaintext, AI prompts, keywords, and full AI model configuration — are stored in the database and returned in the JSON response. This makes it possible for unauthenticated attackers to enumerate sequential task IDs and retrieve sensitive configuration data including API keys.

CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Primary and upstream sources