Access Control Configuration Flaw in Ays Pro AI ChatBot by AYS
CVE-2026-25338
Currently unrated
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 19 February 2026
What is CVE-2026-25338?
The Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS has a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This can lead to unauthorized access and data exposure in versions from n/a to 2.7.4, posing significant security risks to users of the affected software.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
AI ChatBot with ChatGPT and Content Generator by AYS <= n/a
References
Timeline
Vulnerability published
Vulnerability Reserved
Credit
w41bu1 | Patchstack Bug Bounty Program