Unauthorized Data Modification in Assistio Plugin for WordPress

CVE-2026-8614

What is CVE-2026-8614?

The Assistio plugin for WordPress is susceptible to unauthorized data modification owing to insufficient checks in the assistio_plugin_delete_assistio_settings() function. This flaw allows authenticated users with Subscriber-level access or higher to delete essential plugin settings, including the 'assistiobot_oauth_settings.' Such actions can hinder the plugin's integration with the Assistio bot service, posing a significant risk to site functionality and security.

References