SiteRespond
Scan

Threat intelligence

AI Chatbot & Workflow Automation by AIWU <= 1.5.6 - Unauthenticated SQL Injection in getListForTbl()

CVE-2026-2993 · ai-copilot-content-generator

Important: Seeing this vulnerability listed does not mean your website is affected. Exposure depends on whether you run Ai Copilot Content Generator at a vulnerable version. How SiteRespond intelligence works

Vulnerability
AI Chatbot & Workflow Automation by AIWU <= 1.5.6 - Unauthenticated SQL Injection in getListForTbl()
Affected software
ai-copilot-content-generator(Plugin)
Affected versions
  • ≤ 1.5.6
Authentication
Unauthenticated
Vulnerability type
SQL injection
CVE
CVE-2026-2993
Published
11 May 2026
CISA KEV
Not listed in CISA KEV at last catalog refresh
Impact
May allow attackers to read or modify database contents beyond intended access.
Source

Data imported from Wordfence Intelligence (advisory 74c71541-6706-43d2-af3d-0655e59f997c). Methodology and redistribution notes

Check whether your installed version is affected

SiteRespond Defence matches your installed Ai Copilot Content Generator version against this catalog when the Defence plugin is connected to your WordPress site.

Start SiteRespond Defence for WordPress — £29.99/monthScan your website
All Ai Copilot Content Generator advisoriesBack to catalog