Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.1

AI Puffer plugin lets low‑privilege users change global settings

CVE-2026-104741 · published 9 days ago
Summary

The AI Puffer chatbot and automation plugin for WordPress lets anyone who can log in – even a basic subscriber – change important plugin-wide settings if the site owner has given that role access to the “sources” feature. This could alter how the plugin processes and indexes content for all users. Review the role permissions in the plugin’s Role Manager and remove the sources access from low‑level accounts, or update to a version where the check is fixed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
senols ai puffer – ai chatbot, ai writer & automation <= 2.4.89
Original advisory text
AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkit_training_general_settings and aipkit_indexing_field_settings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published10 Oct 2026
Updated16 Oct 2026
First seen10 Oct 2026
Sources
CVE-2026-104741 · NVD
CVE-2026-104741 · MITRE
Track software like this
Free during beta