CVE Catalog
CVE-2026-39699
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
The AI Workflow Automation plugin for WordPress up to version 1.4.2 has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.
Risk Assessment
The organization risks unauthorized execution or modification of AI workflows, potentially disrupting business processes.
Recommendation
Update the AI Workflow Automation plugin to the latest version. Review WordPress permission settings.
Original NVD description (English source)
Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Workflow Automation: from n/a through <= 1.4.2.