WordPress AIWU Plugin Unauth. Arbitrary Mod & Missing Auth (CVE-2026-6804)

www.wordfence.com 2026-07-11查看中文 →

Security AdvisoryCVE-2026-6804MediumAIWU

Affected:

ai-copilot-content-generator <= 1.4.12

Fixed in:

1.5.4

Referenced CVEs: CVE-2026-6804 · 5.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

WP Hotel Booking <=2.3.2 Reflected XSS via 'check_in_date' (CVE-2026-15094) 2026-07-17 WordPress Kirki Plugin Path Traversal to Arbitrary Directory Deletion (CVE-2026-15457) 2026-07-17 ProfilePress Authenticated Arbitrary File Upload RCE via upload_mimes Filter (CVE-2026-13352) 2026-07-17 WooCommerce Placetopay Gateway <= 3.2.2 Reflected XSS (CVE-2026-11324) Advisory 2026-07-17 ThriveDesk <= 2.1.7 Missing Authorization to Authenticated Cache Deletion (CVE-2026-1832) 2026-07-17

Offline Archive

Offline screenshot & PDF are Pro-exclusive