Insufficient Security Controls in AI Content Generator Marketing Plugin for WordPress
CVE-2026-85118

Currently unrated

Key Information:

Vendor

WordPress
Status
Ai Content Generator Marketing
Vendor
CVE Published:
11 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-85118?

The AI Content Generator Marketing WordPress plugin prior to version 1.0.0 is vulnerable to improper access control, allowing unauthenticated users to invoke certain AJAX actions without appropriate nonce or capability checks. This oversight can enable them to update or delete arbitrary WordPress options, potentially leading to unauthorized administrative access to the site, compromising its security and integrity.

Affected Version(s)

AI Content Generator Marketing 0 <= 1.0.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-85118 - Proof of Concept

References

https://wpscan.com/vulnerability/ba76e169-6c2a-489e-99df-...
exploitvdb-entrytechnical-description

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Enrico Marcolini - Claudio Marchesini - Dottor Marc
WPScan
.