CVE-2026-104741: AI Puffer <= 2.4.89 - Missing Authorization to Authenticated (Subscriber+) Global Plugin Settings Modification via ajax_save_cpt_indexing_options AJAX Endpoint
The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify global plugin indexing and vector-search configuration options (aipkittraininggeneralsettings and aipkitindexingfieldsettings), including chunking parameters, file upload visibility, and per-CPT field indexing settings, affecting all users of the plugin. This is only exploitable in configurations where an administrator has granted 'sources' module access to a lower-privileged role via the plugin's Role Manager.
Affected Software
Event History
Frequently Asked Questions
Which WordPress sites are actually exposed to this issue?
The issue is exploitable only when an administrator has used the plugin's Role Manager to grant the sources module to a lower-privileged role. A subscriber-level authenticated account with that access can exploit it.
What changes could an attacker make?
An attacker could modify the global indexing and vector-search settings, including chunking parameters, file-upload visibility, and field-indexing settings for individual custom post types. These changes affect all users of the plugin.
What can be done if updating is not immediately possible?
Review the plugin Role Manager and remove sources module access from lower-privileged roles, especially Subscriber. Restrict access to trusted administrative users until the plugin can be updated.