CVE-2026-82923

Name of the Vulnerable Software and Affected Versions AI Website Builder WordPress plugin (GitHub build) version 1.0.0

Description Lack of authorization and nonce checks on REST API routes allows unauthenticated attackers to perform several unauthorized actions. These include installing and activating plugins and themes, importing content from a controlled URL, and deleting site content and media. Additionally, attackers can write arbitrary files to the uploads directory. In environments where the server is configured to execute PHP files from the uploads directory, this can lead to remote code execution (RCE), which is the ability to execute arbitrary commands on the server.

Recommendations Update AI Website Builder WordPress plugin (GitHub build) version 1.0.0 to a version that implements proper authorization and nonce checks on its REST API routes.