A vulnerability, which was classified as critical , was found in Sergey AIWU Plugin up to 1.4.17 on WordPress. The affected element is an unknown function. Such manipulation leads to incorrect privilege assignment. This vulnerability is referenced as CVE-2026-48879 . It is possible to launch the attack remotely. No exploit is available.