CVE-2026-13009 describes an SQL Injection vulnerability in the AI Copilot – Content Generator plugin for WordPress, affecting all versions up to and including 1.5.4. The issue is due to improper neutralization of special elements in the 'order[0][dir]' parameter, which is not sufficiently escaped before being incorporated into SQL queries. Authenticated attackers with subscriber-level privileges can exploit this by obtaining a valid waic-nonce emitted on the front-end via specific shortcodes ([waic_form] or [aiwu-form]). This nonce allows access to a vulnerable AJAX handler that lacks capability checks beyond nonce verification, enabling attackers to append additional SQL commands and extract sensitive data from the database. The CVSS 3.1 base score is 6.5, indicating a medium severity vulnerability. No patch or official remediation has been documented yet.

Successful exploitation allows authenticated users with low privileges (subscriber-level) to perform SQL Injection attacks, potentially extracting sensitive information from the backend database. The vulnerability does not impact integrity or availability but has a high confidentiality impact. The attack requires user interaction to obtain a valid nonce via shortcode rendering but does not require UI interaction beyond that.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict subscriber-level users from publishing or embedding the vulnerable shortcodes ([waic_form], [aiwu-form]) to prevent nonce exposure. Monitor plugin updates from the vendor for an official fix. Avoid granting unnecessary publishing capabilities to low-privilege users.