CVE-2026-13009

Name of the Vulnerable Software and Affected Versions AI Copilot – Content Generator versions prior to 1.5.5

Description This issue is a generic SQL Injection occurring due to insufficient escaping of user-supplied parameters and a lack of proper preparation of the SQL query. Authenticated attackers with subscriber-level access or higher can append additional SQL queries to existing ones to extract sensitive information from the database. The attack targets the order[0][dir] parameter. The process requires a waic-nonce, which is emitted on the front-end when the [waic form] or [aiwu-form] shortcodes are rendered. This allows contributor-level users who can publish shortcodes to obtain a valid nonce and access the vulnerable AJAX handler, which lacks capability checks beyond nonce verification when shortcodes are not already embedded in a page.

Recommendations Update AI Copilot – Content Generator to version 1.5.5 or later.