Atomic Edge analysis of CVE-2026-6639 (metadata-based):
This vulnerability in the AI Chatbot & Workflow Automation by AIWU plugin (slug: ai-copilot-content-generator), versions up to and including 1.4.6, allows unauthenticated attackers to retrieve sensitive information through the exposed AJAX method `getCurrentTaskResults()` in `modules/workspace/controller.php`. The exposure has a CVSS score of 7.5, with a high confidentiality impact and no required privileges or user interaction, making it a serious risk for sites using affected versions. Atomic Edge analysis confirms the attack vector is exclusively through AJAX, given the plugin registers all actions with both `wp_ajax_` and `wp_ajax_nopriv_` hooks. The patched version 1.4.19 resolves the issue by adding proper authorization checks.
Atomic Edge analysis of CVE-2026-6639 (metadata-based):
This vulnerability allows unauthenticated attackers to retrieve sensitive information by exploiting a missing authorization check in the AJAX action handler. The root cause is the absence of a nonce verification and capability check in the `getCurrentTaskResults()` method. This method is not included in the workspace controller’s `getNoncedMethods()` array, and the base `getPermissions()` method returns an empty array. As a result, the method executes without verifying the caller’s identity or permissions. Since all AJAX actions are registered with `wp_ajax_nopriv_` hooks, the endpoint is reachable without authentication. This assessment is inferred from the CWE classification and official description; no source code diff was available to confirm the exact implementation.
To exploit this vulnerability, an attacker sends a crafted POST request to the WordPress admin AJAX endpoint. The request path is `/wp-admin/admin-ajax.php`, and the required `action` parameter is `getCurrentTaskResults`. The attack requires no additional parameters, as the method enumerates task IDs sequentially and returns their stored configuration data. The attacker can call this action multiple times, incrementing the internal task ID in the request body or URL to retrieve all exposed tasks. Each JSON response includes the task parameters, which for tasks created by features like the Bulk Post Generator contain sensitive data: the OpenAI API key in plaintext, AI prompts, keywords, and full model configuration. The lack of a nonce and authentication check makes the endpoint trivial to exploit repeatedly.
Remediation requires applying the plugins patched version 1.4.19. The fix must add authorization checks to the vulnerable method. Atomic Edge analysis advises the plugin developers to include `getCurrentTaskResults` in the `getNoncedMethods()` array and validate the nonce at the start of the method. Additionally, the method should verify that the current user has the required capability, such as `manage_options`, before returning any task data. The AJAX callback registration should also be reviewed to ensure that actions handling sensitive data do not use `wp_ajax_nopriv_` hooks unless strictly necessary.
The impact of this vulnerability is high for data confidentiality. An unauthenticated attacker can harvest API keys, AI prompts, keywords, and model configurations stored in task data. The exposed OpenAI API key in plaintext can lead to unauthorized usage of the AI service, incurring financial costs for the site owner. The AI prompts and model configuration may reveal proprietary business logic or sensitive content strategy. While the vulnerability does not directly allow privilege escalation or remote code execution, the exposed API keys could be leveraged for further attacks, such as abusing the AI service or accessing associated accounts. Sites running versions up to 1.4.6 should prioritize updating to 1.4.19 immediately.
