Security Alert Summary
The AI Puffer – Chat. Create. Automate. (formerly AI Power) WordPress plugin contains an authorization bypass in all versions up to and including 2.4.89. Authenticated users with subscriber-level access or higher may be able to modify global plugin indexing and vector-search configuration options when an administrator has granted the plugin’s ‘sources’ module access to a lower-privileged role via the plugin Role Manager.
CVE Details
- CVE ID: CVE-2026-104741
- Affected component: AI Puffer – Chat. Create. Automate. (formerly AI Power) WordPress plugin
- Affected versions: All versions up to and including 2.4.89
- Published: October 10, 2026 at 6:16:39 AM
- Last modified: October 10, 2026 at 6:16:39 AM
- CVSS v3.1 base score: 3.1 (LOW)
- CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
- Authentication / privileges / user interaction: Requires an authenticated account. Privileges required: Low (subscriber-level or higher). User interaction: None.
- Primary impact: Confidentiality: None; Integrity: Low; Availability: None
- CWE / weakness: CWE-862 (Improper Authorization)
Technical Details
The vulnerability is an authorization bypass where the plugin does not properly verify that an authenticated user is authorized to perform certain configuration actions. Because authorization checks are missing or insufficient, authenticated attackers with low-level privileges can modify global plugin options related to indexing and vector-search behavior.
Named settings affected include aipkit_training_general_settings and aipkit_indexing_field_settings, and changes can include chunking parameters, file upload visibility, and per-CPT field indexing settings. The issue is exploitable only in setups where an administrator has granted the plugin’s ‘sources’ module access to a lower-privileged role through the plugin Role Manager. The CVE references plugin code locations relating to AJAX handlers and dashboard AJAX handlers, which indicates the modification pathways occur via plugin AJAX endpoints.
Impact is limited to the ability to alter the plugin’s global indexing and vector-search configuration; the CVSS vector indicates no direct confidentiality impact but a low integrity impact. There is no indication in the provided data that this vulnerability allows remote code execution or full site compromise.
How This Could Impact Your Website
Consider a site with several WordPress accounts: the site owner (administrator), internal staff members (editors or contributors), and external contractors or content contributors (contributors or subscribers). If an administrator has granted the plugin’s ‘sources’ module to a lower-privileged role, an authenticated contributor or subscriber could change global indexing or file visibility settings used by the plugin. Practical consequences may include exposure of internal file upload visibility or changes to which custom fields are indexed, which could surface data to users or systems that normally would not access it.
Even where direct data disclosure is not indicated by the CVSS impact, altered indexing settings could indirectly increase risk by making internal user information easier to discover, which can lead to targeted phishing or social engineering against staff. If you\’re unsure whether your site is affected or how to assess your current user roles and plugins, it may be worth having a professional review.
Recommended Actions
- Update the affected plugin as soon as a patched version is available.
- Review and reduce unnecessary user roles and capabilities, especially for contributors and subscribers.
- Enforce strong passwords and enable two-factor authentication for editors and administrators.
- Remove unused or unmaintained plugins.
- Monitor site activity and plugin configuration changes for unusual behavior or unexpected option updates.
If you\’d like help reviewing your plugins, user roles, or overall WordPress security posture, our team at Freshy is happy to help.
References
- https://plugins.trac.wordpress.org/browser/gpt3-ai-content-generator/tags/2.4.88/classes/core/ajax/class-aipkit-core-ajax-handler.php#L737
- https://plugins.trac.wordpress.org/browser/gpt3-ai-content-generator/tags/2.4.88/classes/core/ajax/class-aipkit-core-ajax-handler.php#L883
- https://plugins.trac.wordpress.org/browser/gpt3-ai-content-generator/tags/2.4.88/classes/core/ajax/class-aipkit-core-ajax-handler.php#L950
- https://plugins.trac.wordpress.org/browser/gpt3-ai-content-generator/tags/2.4.88/classes/dashboard/ajax/class-aipkit-base-dashboard-ajax-handler.php#L53
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3725365%40gpt3-ai-content-generator&new=3725365%40gpt3-ai-content-generator
- https://www.wordfence.com/threat-intel/vulnerabilities/id/25ae6c7d-a03c-43f6-9c46-8797a9765d04?source=cve
