CVE-2026-14526: Critical Authorization Bypass in AI Copilot – Content Generator WordPress Plugin
The AI Copilot – Content Generator plugin for WordPress has a critical vulnerability (CVE-2026-14526, CVSS 9.8) allowing unauthenticated attackers to create administrator-level user accounts, potentially leading to full site takeover. All versions up to and including 1.5.6 are affected. Immediate action is required to mitigate this vulnerability.