Tools AI Risk Radar ai-incident-0194
Incident record
AI Content Generator plugin exposes WordPress administration settings
- Severity
- Critical
- Status
- Research
- Type
- Infra Vuln
- Target
- AI Content Generator Marketing through 1.0.0
- Actor
- researcher
- CVE
- CVE-2026-85118
What happened
Unauthenticated requests can change or delete WordPress options through an unprotected plugin handler. The reported impact includes obtaining administrator access.
WPScan’s CNA record was published on 11 October. Critical is an editorial assessment of the described unauthenticated site-takeover impact; the record supplies no CVSS score. Patch status remains unconfirmed as of 11 October.
Sources
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-85118
- GitHub advisory, unreviewedgithub.com/advisories/GHSA-rx89-7fw5-qgmg
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026