Description

The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to create a new administrator-level user account and achieve full site takeover by saving and executing a malicious workflow containing a wp_create_user action node specifying role=administrator. This vulnerability is exploitable by unauthenticated attackers on any site where the [aiwu-form] shortcode or public chatbot is rendered on a frontend page, as the waic-nonce value is emitted into publicly accessible JavaScript (WAIC_DATA.waicNonce) on those pages, rendering the nonce check a non-functional authorization barrier.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "9.8",
  "pubDate": "2026-08-08T07:17:08.297Z",
  "pubdate": "2026-08-08T07:17:08.297Z",
  "executiveSummary": "The AI Copilot – Content Generator plugin for WordPress in all versions up to, and including, 1.5.6 suffers from an authorization bypass vulnerability.\nThis security defect allows unauthenticated remote attackers to create new administrator-level user accounts, resulting in full site takeover.\nThe vulnerability stems from improper authorization verification within the plugin, combined with the insecure exposure of cryptographic nonces in frontend JavaScript contexts.\nSpecifically, when the [aiwu-form] shortcode or public chatbot is rendered on a frontend page, the waic-nonce value is emitted into the publicly accessible WAIC_DATA.waicNonce JavaScript object.\nThis exposure neutralizes the nonce validation mechanism, transforming a weak cryptographic barrier into a non-functional control.\nAttackers can leverage this flaw without authentication on any WordPress installation utilizing the vulnerable plugin where the specified shortcode or chatbot is active.\nThe risk implications are severe, as successful exploitation immediately grants administrative privileges to the attacker, leading to arbitrary code execution, data exfiltration, and complete compromise of the underlying web application.\nRemediation requires restricting public exposure of sensitive nonce values and enforcing rigorous server-side authorization checks prior to executing administrative actions.",
  "technicalDetails": "The vulnerability resides in the AI Copilot – Content Generator plugin for WordPress, specifically affecting all versions up to, and including, 1.5.6.\nThe root cause of the vulnerability is the absence of robust authorization checks combined with a flawed nonce implementation within the plugin's action-handling routines.\nWhen a user or unauthenticated visitor accesses a frontend page containing the [aiwu-form] shortcode or the public chatbot, the server emits the waic-nonce value directly into the HTML response inside a publicly accessible JavaScript object designated as WAIC_DATA.waicNonce.\nBecause this cryptographic nonce is exposed to anonymous visitors, the intended function of the nonce as an authorization and request-validation barrier is entirely bypassed.\nThe exploitation method relies on the plugin's capability to process and execute saved workflows.\nAn unauthenticated attacker can exploit this behavior through a step-by-step attack flow:\n1. The attacker identifies a target WordPress site running a vulnerable version of the AI Copilot – Content Generator plugin that exposes the [aiwu-form] shortcode or public chatbot on a publicly accessible frontend page.\n2. The attacker harvests the waic-nonce value directly from the WAIC_DATA.waicNonce JavaScript variable in the page source.\n3. The attacker crafts a malicious workflow containing a wp_create_user action node explicitly configured with the role set to administrator.\n4. The attacker submits this malicious workflow payload to the plugin's backend handler, supplying the harvested nonce to satisfy the weak validation check.\n5. The plugin fails to verify whether the requesting session possesses administrative privileges, processes the workflow, and executes the wp_create_user function.\nThe post-exploitation impact includes the successful provisioning of a rogue administrator-level user account, enabling the attacker to achieve full site takeover, modify system configurations, install malicious plugins or themes, and execute arbitrary code on the underlying server."
}