CVE Catalog
CVE-2026-65507
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.33%
26th percentile - higher than 26% of all known CVEs
Summary
Unauthenticated Privilege Escalation vulnerability in AIWU versions up to 1.5.6.
Risk Assessment
An unauthenticated attacker can escalate privileges, potentially leading to full compromise of the WordPress site.
Recommendation
Update the AIWU plugin to the latest patched version.
Other vulnerabilities in AIWU
See all- CVE-2026-59515Critical
The AIWU content generator plugin contains a blind SQL injection vulnerability in versions up to and including 1.5.4. An attacker can exploit improper neutralization of special elements in SQL commands.
- CVE-2026-48879Critical
The AIWU WordPress plugin contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions from n/a through 1.4.17.
Original NVD description (English source)
Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.