Executive brief
WPBot is a WordPress plugin that integrates Claude AI capabilities into WordPress sites. A missing authorization check in its settings AJAX endpoint allows any subscriber-level user to overwrite AI provider settings, including the API key, potentially compromising the site's AI integration and enabling abuse of the API credentials.
Technical details
WPBot before version 8.7.6 fails to validate user capabilities in an AJAX action responsible for saving Claude AI provider settings. The vulnerability is a broken access control issue (CWE-284, OWASP A5) that allows any authenticated user with subscriber-level privileges to call this endpoint and modify settings including the Claude AI API key. No authentication bypass is required—the attacker simply needs a valid subscriber account. An attacker can overwrite API credentials, potentially disrupting legitimate AI functionality, redirecting AI requests to malicious endpoints, or gaining access to the victim site's API quota and costs.
Affected products
- WPBot WPBot 8.7.2 to 8.7.5
Timeline
- 2026-09-14: disclosed
- 2026-09-16: patched: Fixed in version 8.7.6