CVE-2026-14526: WordPress AI Copilot Auth Bypass Flaw

CVE-2026-14526 Overview

CVE-2026-14526 is an authorization bypass vulnerability in the AI Copilot – Content Generator plugin for WordPress. The flaw affects all versions up to and including 1.5.6. The plugin fails to properly verify that users are authorized to perform sensitive actions. Unauthenticated attackers can create administrator-level accounts by saving and executing a malicious workflow containing a wp_create_user action node with role=administrator. Exploitation succeeds on any site rendering the [aiwu-form] shortcode or public chatbot, because the plugin emits the waic-nonce value into publicly accessible JavaScript through WAIC_DATA.waicNonce. The vulnerability is categorized as [CWE-269] Improper Privilege Management.

Critical Impact

Unauthenticated attackers can create administrator accounts and achieve full WordPress site takeover on any page where the plugin's shortcode or chatbot is rendered.

Affected Products

• AI Copilot – Content Generator plugin for WordPress (all versions ≤ 1.5.6)
• WordPress sites rendering the [aiwu-form] shortcode on frontend pages
• WordPress sites with the plugin's public chatbot enabled

Discovery Timeline

• 2026-08-08 - CVE-2026-14526 published to NVD
• 2026-08-12 - Last updated in NVD database

Technical Details for CVE-2026-14526

Vulnerability Analysis

The AI Copilot – Content Generator plugin implements a workflow engine that supports action nodes such as wp_create_user. The workflow controller registers AJAX endpoints that rely on WordPress nonce verification as the sole authorization mechanism. This design conflates authentication (nonce validity) with authorization (permission to run privileged actions). Because the nonce is published to any unauthenticated visitor via the frontend JavaScript object WAIC_DATA.waicNonce, the check offers no real access control. An attacker can retrieve the nonce, submit a crafted workflow definition, and trigger the wp_create_user action node with the administrator role. The result is full site takeover with no prior authentication or user interaction.

Root Cause

The plugin emits a valid nonce into public HTML through the asset loader referenced in classes/assets.php and classes/frame.php. The workflow controller in modules/workflow/controller.php accepts workflow save-and-execute requests validated only by that nonce. The wp_create_user action in modules/workflow/blocks/actions/wp_create_user.php performs user creation without a capability check such as current_user_can('create_users').

Attack Vector

The attack is fully remote and network-based. An unauthenticated attacker loads a public page containing the [aiwu-form] shortcode or chatbot, extracts WAIC_DATA.waicNonce from the page source, then issues an AJAX POST to the workflow endpoint. The request body contains a workflow definition with a wp_create_user action node specifying attacker-controlled username, password, email, and role=administrator. The plugin creates the account, granting the attacker administrative access to the WordPress instance. Technical details are available in the Wordfence Vulnerability Report and the WordPress AI Copilot Workflow Controller source.

Detection Methods for CVE-2026-14526

Indicators of Compromise

• Unexpected new WordPress user accounts with the administrator role in wp_users and wp_usermeta
• HTTP POST requests to the plugin's admin-ajax workflow action from unauthenticated sources
• Workflow definitions stored in plugin options or custom tables containing wp_create_user action nodes with role=administrator
• Outbound admin logins from previously unseen IP addresses shortly after suspicious AJAX traffic

Detection Strategies

• Inspect WordPress access logs for POST requests to admin-ajax.php with plugin-specific action parameters originating from IPs that never authenticated
• Audit user creation events and compare against expected registration workflows and administrator provisioning
• Deploy a web application firewall rule that blocks unauthenticated requests containing wp_create_user and administrator strings in the request body targeting plugin endpoints

Monitoring Recommendations

• Enable WordPress audit logging for user_register and role assignment events, and forward logs to a centralized SIEM
• Alert on any creation of administrator accounts outside of change windows or approved provisioning processes
• Monitor plugin-related database tables for insertions of workflow definitions referencing privileged action nodes

How to Mitigate CVE-2026-14526

Immediate Actions Required

• Deactivate and remove the AI Copilot – Content Generator plugin until a fixed version is confirmed available and installed
• Remove any [aiwu-form] shortcodes and disable the public chatbot on frontend pages
• Enumerate all administrator accounts and delete any unrecognized entries, then rotate credentials for legitimate admins
• Review workflow definitions stored by the plugin and delete any containing wp_create_user actions

Patch Information

All versions up to and including 1.5.6 are affected according to the NVD entry. Site owners should monitor the WordPress plugin repository for a release higher than 1.5.6 that adds capability checks to the workflow controller and the wp_create_user action, and that stops emitting the workflow nonce to unauthenticated visitors.

Workarounds

• Restrict access to admin-ajax.php plugin actions at the reverse proxy or WAF layer, allowing only authenticated sessions
• Remove the shortcode and chatbot from public-facing pages so the nonce is not exposed in page source
• Apply the principle of least privilege by disabling user registration and reviewing role capabilities via wp-config.php and role management tools

# Disable the plugin via WP-CLI until a patched release is installed
wp plugin deactivate ai-copilot-content-generator
wp plugin delete ai-copilot-content-generator

# List administrator accounts for review
wp user list --role=administrator --fields=ID,user_login,user_email,user_registered