External risk intelligence

AI Copilot WordPress Plugin Administrator Session Hijacking Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-9810

The vulnerability exists in a WordPress plugin. WordPress sites and their associated plugins are commonly deployed as public-facing web applications accessible via the internet, making this interface a likely target for remote, unauthenticated access through the plugin's OAuth flow.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical security vulnerability has been identified in the AI Copilot WordPress plugin, potentially allowing unauthenticated attackers to gain administrator privileges. This could enable them to perform actions such as creating new users or escalating user roles on affected websites. The primary concern is to confirm if this plugin is in use and if it is exposed to external access.

Unauthenticated access granted to administrator functions.
Confirms plugin relevance and external exposure.
Verify usage and external access to understand risk.

Attack Path

How an attacker could exploit the issue

An attacker could exploit this by completing a public OAuth flow, which bypasses the need for authentication and directly grants them administrative privileges. This allows them to execute powerful administrative functions within the WordPress site.

Unauthenticated access to public OAuth flow.
Accepted valid OAuth tokens as administrator.
Arbitrary user creation and role escalation.

Live Threat

Current exploitation, exposure, and threat context

An unauthenticated attacker could gain administrator privileges on a WordPress site by exploiting a flaw in the AI Copilot plugin's handling of OAuth access tokens. This could allow them to perform administrative actions, such as creating new users or escalating privileges, effectively taking control of the site.

Website administrator account.
Unauthenticated access via public OAuth flow.
Full site control and data modification.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability impacts the AI Copilot WordPress plugin, specifically its handling of OAuth access tokens. Given that WordPress plugins are often deployed on public-facing web servers, this issue could be exploited by unauthenticated attackers to gain administrative privileges. The first practical step is to identify all instances of the AI Copilot plugin, determine their exposure and criticality, and then assign ownership for remediation planning based on the assessed risk.

WordPress site administrators should own this issue.
Verify plugin installation and external reachability.
Plan remediation based on exposure and criticality.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the AI Copilot WordPress plugin?

The AI Copilot plugin is an add-on for WordPress websites designed to integrate artificial intelligence capabilities. It typically enables users to utilize AI models directly within the site's dashboard to perform tasks, automate content generation, or manage site operations. By extending the core functionality of a WordPress site, it introduces new interfaces—like the affected OAuth flow—to facilitate communication between the plugin and external AI services.

How does CVE-2026-9810 allow unauthorized access?

This vulnerability is classified as Improper Privilege Management (CWE-269). It occurs because the plugin fails to verify that an OAuth access token belongs to a legitimate WordPress administrator. Instead, the system blindly trusts any valid token from the public OAuth process, treating the bearer as a site administrator. This flaw lets an attacker bypass standard login requirements and gain full control over privileged administrative tools.

What triggers this vulnerability?

An attacker triggers this issue by completing the public-facing OAuth handshake process provided by the plugin. Because the plugin does not associate the resulting access token with a specific, authenticated WordPress user account, it essentially unlocks administrator-level permissions for anyone who completes the flow. Simply browsing the site or interacting with non-OAuth components does not trigger this vulnerability.

Why should I care about CVE-2026-9810?

According to Halo Surface Signal, this vulnerability is highly relevant because WordPress plugins are frequently deployed on internet-facing web servers. Since the flaw is reachable through a public web interface without requiring existing credentials, any site running an affected version is potentially accessible to remote, unauthenticated attackers who can exploit the OAuth mechanism to take control of the application.

What is the first step to address this plugin issue?

Begin by auditing your WordPress environment to confirm whether the AI Copilot plugin is installed and active. Once identified, evaluate the plugin's accessibility to the internet. Since this is an administrative-level flaw, prioritize these instances for updates. Coordinating with your team to verify usage and prepare a remediation plan is essential to preventing potential unauthorized site modifications.

References

wpscan.com/vulnerability/6378a370-fe2f-48e7-984f-6e6c575dba60/

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.