/Vulnerability Library

AI Copilot Content Generator <=1.4.6 - Unauthenticated Task Data Exposure

CVE-2026-6639
Verified

Description

AIWU AI Chatbot & Workflow Automation WordPress plugin <= 1.4.6 contains a sensitive information exposure caused by unauthenticated access to getCurrentTaskResults() method, letting unauthenticated attackers retrieve API keys and configuration data, exploit requires no authentication.

Severity

High

CVSS Score

7.5

Exploit Probability

2%

Affected Product

ai-copilot-content-generator

Published Date

September 22, 2026

Template Author

str4k3r

CVE-2026-6639.yaml
7.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2026-6639
CWE ID:
cwe-862

References

https://nvd.nist.gov/vuln/detail/CVE-2026-6639https://www.wordfence.com/threat-intel/vulnerabilities/id/247b1921-70a6-4e65-819a-2895bc395e9f?source=cve

Remediation Steps

Update to the latest version beyond 1.4.6.