CyberSecBulletin

AI Copilot vulnerabilities

We track 1 vulnerability in AI Copilot products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest AI Copilot vulnerabilities

  • 9.8 Critical severity

    AI Copilot: Improper Privilege Management

    CVE-2026-9810AI Copilot

    The AI Copilot WordPress plugin before 1.5.4 does not bind OAuth access tokens to a WordPress user, and accepts any valid token as an administrator session, allowing unauthenticated attackers who complete the public OAuth flow to execute privileged MCP tools a