{"data":{"id":"3341417d-8d00-4e4f-a7d1-e8dba26518cf","title":"CVE-2026-6639: The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all","summary":"The AI Chatbot & Workflow Automation by AIWU WordPress plugin has a security flaw (in versions up to 1.4.6) where a method called `getCurrentTaskResults()` can be accessed by anyone without logging in, allowing them to retrieve sensitive data like OpenAI API keys (credentials that grant access to AI services) stored in plaintext in the database. Attackers can guess sequential task IDs to find and steal this configuration information.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-6639","publishedAt":"2026-08-05T08:16:41.427Z","cveId":"CVE-2026-6639","cweIds":["CWE-862"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["pii_leakage"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["OpenAI","AIWU"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-05T08:16:41.427Z","capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}