{"uuid": "230fdff0-0d27-4125-ac96-00f07a866f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14526", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117060129732420475", "content": "CVE-2026-14526: AI Copilot \u2013 Content Generator <=1.5.6 has a CRITICAL auth bypass. Unauth attackers can create WordPress admin users via an exposed nonce, leading to site takeover. Disable [aiwu-form]/chatbot & check for vendor patch. https://radar.offseq.com/threat/cve-2026-14526-cwe-269-improper-privilege-management-in-wupsales-ai-copilot-content-generator-735a53bb0d60cd45 #OffSeq #CVE202614526 #WordPress", "creation_timestamp": "2026-08-08T13:31:30.079683Z"}