Incorrect Privilege Assignment vulnerability in Sergey AIWU allows Privilege Escalation.

This issue affects AIWU: from n/a through 1.4.17.

A privilege escalation vulnerability (CVE-2026-48879) has been identified in the AIWU WordPress plugin by Sergey. The vulnerability is caused by incorrect privilege assignment, allowing attackers to escalate their privileges within the affected system. This security flaw affects all versions of the AIWU plugin from the initial release through version 1.4.17. The vulnerability has been assigned a high criticality rating, indicating significant potential impact on affected WordPress installations. Users should update to a patched version beyond 1.4.17 when available or consider disabling the plugin until a fix is released.